Evolution CMS Cross-site Scripting (XSS)

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2018-16638 · ADVISORY
• evolution-cms/evolution · WEB
• evolution-cms/evolution commit b59d1f5 · WEB
• evolution-cms/evolution · PACKAGE
• security-breachlock/CVE-2018-16638 · WEB

evolutioncms/evolution のその他の脆弱性

• CVE-2023-43340中 5.2Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload inject…
• CVE-2023-43341中 6.1Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload in…
• CVE-2018-16637中 5.4Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.