{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.2.3"}],"component":"evolutioncms/evolution","cve_ids":["CVE-2023-43340"],"ecosystem":"Packagist","epss":0.0049,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-432f-967f-vxg4","id":"tcs_01M5KETFHGP65K4SC7EQMHJ7RK","modified_at":"2026-09-10T03:49:24.657201583Z","published_at":"2023-10-20T00:30:25Z","references":["https://osv.dev/vulnerability/GHSA-432f-967f-vxg4","https://nvd.nist.gov/vuln/detail/CVE-2023-43340","https://github.com/evolution-cms/evolution","https://github.com/sromanhu/-CVE-2023-43340-Evolution-Reflected-XSS---Installation-Admin-Options","https://github.com/sromanhu/Evolution-Reflected-XSS---Installation-Admin-Options"],"severity":{"label":"medium","score":5.2},"sources":[{"source":"osv","source_id":"GHSA-432f-967f-vxg4","url":"https://osv.dev/vulnerability/GHSA-432f-967f-vxg4"}],"summary":"Evolution CMS Cross-site Scripting vulnerability"}