Evolution CMS Cross-site Scripting vulnerability

MÉDIO 6.1CVE-2023-43341 · GHSA-5h47-9rm5-fx3f · Published 19/10/2023 · updated 17/06/2026

Em resumo

CVE-2023-43341 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta evolutioncms/evolution, evolution cms (evo).
Chance de exploração nos próximos 30 dias (EPSS): 0.62%, maior que 49.8% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
evolutioncms/evolution Packagist	`≤ 3.2.3`	No fix yet
evolution cms evo	`= 3.2.3`	No fix yet

Description

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.

NVD description

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.

References

nvd.nist.gov/vuln/detail/CVE-2023-43341 · ADVISORY
evolution-cms/evolution · PACKAGE
sromanhu/CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection- · WEB
sromanhu/Evolution-Reflected-XSS---Installation-Connection- · WEB

Mais vulnerabilidades de evolutioncms/evolution

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

evolutioncms/evolution

Packagist

≤ 3.2.3

No fix yet

evolution cms

evo

= 3.2.3

No fix yet

Description

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.

NVD description

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.

Mais vulnerabilidades de evolutioncms/evolution

Ver tudo →