Evolution CMS Cross-site Scripting (XSS)

Description

References

• nvd.nist.gov/vuln/detail/CVE-2018-16638 · ADVISORY
• evolution-cms/evolution · WEB
• evolution-cms/evolution commit b59d1f5 · WEB
• evolution-cms/evolution · PACKAGE
• security-breachlock/CVE-2018-16638 · WEB

evolutioncms/evolution 的其他漏洞

• CVE-2023-43340中危 5.2Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload inject…
• CVE-2023-43341中危 6.1Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload in…
• CVE-2018-16637中危 5.4Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.