CVE-2018-16637

Packagist/evolutioncms/evolution CVE-2018-16637: medium 5.4

Evolution CMS Stored Cross-site Scripting (XSS)

Action: Upgrade evolutioncms/evolution to 1.4.6 or later.

composer require evolutioncms/evolution:1.4.6

Affected

Fixed versions

Sources

• osv: GHSA-8h24-3cjr-xxmh
• https://nvd.nist.gov/vuln/detail/CVE-2018-16637
• https://github.com/evolution-cms/evolution/issues/788
• https://github.com/evolution-cms/evolution/commit/2b8aaa6224997155de0fe9440ad106bd98dc4f4b
• https://github.com/evolution-cms/evolution
• https://github.com/security-breachlock/CVE-2018-16637/blob/master/evolution_xss_stored.pdf

CVE-2018-16637 · published 2022-05-14T01:31:07Z · modified 2024-04-25T21:57:35.797055Z · JSON