Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/evolutioncms/evolution@2.0.0-RC
purl pkg:composer/evolutioncms/evolution@2.0.0-RC
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 3.1
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-9xwv-eydk-kubj
Aliases:
CVE-2023-43340
GHSA-432f-967f-vxg4
Cross-site scripting (XSS) vulnerability in evolution v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected into the cmsadmin, cmsadminemail, cmspassword and cmspasswordconfim parameters There are no reported fixed by versions.
VCID-vkqp-gjpf-3bgp
Aliases:
CVE-2023-43341
GHSA-5h47-9rm5-fx3f
Cross-site scripting (XSS) vulnerability in evolution evo v.3.2.3 allows a local attacker to execute arbitrary code via a crafted payload injected uid parameter. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T19:09:06.202980+00:00 GitLab Importer Affected by VCID-vkqp-gjpf-3bgp https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/evolutioncms/evolution/CVE-2023-43341.yml 38.6.0
2026-06-12T19:09:05.897163+00:00 GitLab Importer Affected by VCID-9xwv-eydk-kubj https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/evolutioncms/evolution/CVE-2023-43340.yml 38.6.0