Evo records
3 published records for vendor evo.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 1
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Attack profile
All records
3 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2023-43341Proof of concept | Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload inevo · evolution cms · CWE-79 | Medium6.1 | — | 0.6% | Oct 19, 2023 |
21Monitor | CVE-2020-23238No exploit | Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature.evo · evolution cms · CWE-79 | Medium5.4 | — | 0.5% | Jul 26, 2021 |
20Monitor | CVE-2023-43340Proof of concept | Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injectevo · evolution cms · CWE-79 | Medium5.2 | — | 0.5% | Oct 19, 2023 |
- CVE-2023-4334124Monitor
Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload in
MediumCVSS 6.1Proof of conceptEPSS 1%evo · evolution cmsOct 19, 2023
- CVE-2020-2323821Monitor
Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature.
MediumCVSS 5.4No exploitEPSS 1%evo · evolution cmsJul 26, 2021
- CVE-2023-4334020Monitor
Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload inject
MediumCVSS 5.2Proof of conceptEPSS 0%evo · evolution cmsOct 19, 2023