CVE-2023-43340

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the…

published October 19, 2023

CVSS
—
EPSS
0%
Percentile
41.2
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00490 · 41.2th percentile
Published
2023-10-19T00:00Z
EPSS history
Timeline
  • 19 OCT 00:00Z
    Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the…
    cvelistv5