Vulnerability Database

289,599

Total vulnerabilities in the database

CVE-2023-43341

Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter.

CVSS v3:

  • Severity: Medium
  • Score: 6.1
  • AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
evolutioncms / evolution - 3.2.3.x
evo / evolution_cms 3.2.3 3.2.3.x