Evolution Cms (Evo) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 49 known versions, newest CVE from 2026-05-10. Vendor: Evo.

CVEs of Evolution Cms

• CVE-2021-47939 - CVSS 8.8 (high), 2026-05-10: Evolution CMS 3.1.6 contains a remote code execution vulnerability that allows authenticated users with module creation permissions to execute arbitrary…
• CVE-2023-43340 - CVSS 5.2 (medium), 2023-10-19: Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the…
• CVE-2023-43341 - CVSS 6.1 (medium), 2023-10-19: Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid…
• CVE-2020-23238 - CVSS 5.4 (medium), 2021-07-26: Cross Site Scripting (XSS) vulnerability in Evolution CMS 2.0.2 via the Document Manager feature.