{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0","last_affected":"3.2.3"}],"component":"evolutioncms/evolution","cve_ids":["CVE-2023-43341"],"ecosystem":"Packagist","epss":0.00621,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-5h47-9rm5-fx3f","id":"tcs_01M5KEW2WBH16ENW855WZRKQF8","modified_at":"2026-09-10T03:49:58.475158622Z","published_at":"2023-10-20T00:30:24Z","references":["https://osv.dev/vulnerability/GHSA-5h47-9rm5-fx3f","https://nvd.nist.gov/vuln/detail/CVE-2023-43341","https://github.com/evolution-cms/evolution","https://github.com/sromanhu/CVE-2023-43341-Evolution-Reflected-XSS---Installation-Connection-","https://github.com/sromanhu/Evolution-Reflected-XSS---Installation-Connection-"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-5h47-9rm5-fx3f","url":"https://osv.dev/vulnerability/GHSA-5h47-9rm5-fx3f"}],"summary":"Evolution CMS Cross-site Scripting vulnerability"}