What is GHSA-8h24-3cjr-xxmh?

GHSA-8h24-3cjr-xxmh is a security advisory published by GitHub Security Advisories with Medium severity. Evolution CMS Stored Cross-site Scripting (XSS)

Which CVE IDs does GHSA-8h24-3cjr-xxmh cover?

GHSA-8h24-3cjr-xxmh covers the following CVE IDs: CVE-2018-16637. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-8h24-3cjr-xxmh?

GHSA-8h24-3cjr-xxmh has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-8h24-3cjr-xxmh?

GHSA-8h24-3cjr-xxmh affects 1 product, including: composer/evolutioncms/evolution:\u003e= 1.4, \u003c 1.4.6.

GHSA-8h24-3cjr-xxmhMediumCVSS 5.4

Evolution CMS Stored Cross-site Scripting (XSS)

Vendor

GitHub Security Advisories

Published

May 14, 2022

Last Modified

April 25, 2024

🔗 CVE IDs covered (1)

CVE-2018-16637 →

📋 Description

Evolution CMS 1.4.x prior to 1.4.6 allows XSS via the page weblink title parameter to the manager/ URI.

🎯 Affected products1

composer/evolutioncms/evolution:>= 1.4, < 1.4.6

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2018-16637
https://github.com/security-breachlock/CVE-2018-16637/blob/master/evolution_xss_stored.pdf
https://github.com/evolution-cms/evolution/issues/788
https://github.com/evolution-cms/evolution/commit/2b8aaa6224997155de0fe9440ad106bd98dc4f4b
https://github.com/advisories/GHSA-8h24-3cjr-xxmh