CVE-2018-16638
1 advisory.
Packagist/evolutioncms/evolution CVE-2018-16638: medium 5.4, EPSS 0.57%
Evolution CMS Cross-site Scripting (XSS)
Action: Upgrade evolutioncms/evolution to 1.4.6 or later.
composer require evolutioncms/evolution:1.4.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.4.0 | 1.4.6 | - |
Fixed versions
| 1.4.6 |
Sources
- osv: GHSA-9mfc-gr8c-xj4m
- https://nvd.nist.gov/vuln/detail/CVE-2018-16638
- https://github.com/evolution-cms/evolution/issues/789
- https://github.com/evolution-cms/evolution/commit/b59d1f57be37ab752d65be4bc4d3546c36b69415
- https://github.com/evolution-cms/evolution
- https://github.com/security-breachlock/CVE-2018-16638/blob/master/evolution_xss_reflected.pdf
CVE-2018-16638 · published · modified · JSON