CVE-2018-16637: Evolution CMS Stored Cross-site Scripting (XSS)
Summary
CVE-2018-16637: Evolution CMS Stored Cross-site Scripting (XSS). Affects evolutioncms/evolution versions >= 1.4, < 1.4.6. Fixed in 1.4.6. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
Evolution CMS is a content management system that allows users to create and manage websites. It provides a user-friendly interface for managing web content, including pages, templates, and plugins. The vulnerability identified as CVE-2018-16637 affects Evolution CMS versions 1.4.x prior to 1.4.6. This vulnerability allows for the execution of stored cross-site scripting (XSS) attacks through the page weblink title parameter in the manager/ URI.
Vulnerability Detail
The vulnerability arises from a lack of proper input sanitization and validation in the affected versions of Evolution CMS. An attacker can exploit this vulnerability by injecting malicious code into the page weblink title parameter. When a user with appropriate privileges accesses the affected page, the injected code is executed in their browser, potentially leading to unauthorized actions, data theft, or further compromise of the system. The severity of this vulnerability is rated as MODERATE with a CVSS score of 5.4.
How To Fix
Minimum fixed version
1.4.6
This is the first release that contains the fix.
composer require evolutioncms/evolution:1.4.6Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
If upgrading to the latest version is not immediately feasible, a temporary workaround can be implemented by manually sanitizing and validating the page weblink title parameter. This can be done by implementing input filtering and encoding techniques to neutralize any potential malicious code. Here is an example of how to sanitize the parameter using PHP:
$title = htmlspecialchars($_GET['title'], ENT_QUOTES, 'UTF-8');
Conclusion
The vulnerability identified as CVE-2018-16637 in Evolution CMS versions 1.4.x prior to 1.4.6 allows for stored cross-site scripting (XSS) attacks. It is crucial to upgrade to the latest version of Evolution CMS or apply the provided workaround to mitigate the risk of unauthorized actions, data theft, or further compromise of the system. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for evolutioncms/evolution →
FAQ
Evolution CMS is a content management system that allows users to create and manage websites. It provides a user-friendly interface for managing web content, including pages, templates, and plugins.
Stored cross-site scripting (XSS) is a type of vulnerability that allows an attacker to inject malicious code into a website, which is then stored and executed by other users who access the affected page. This can lead to unauthorized actions, data theft, or further compromise of the system.
The impact of this vulnerability is that an attacker can execute arbitrary code in the context of a user's browser, potentially leading to unauthorized actions, data theft, or further compromise of the system.
To fix this vulnerability, it is recommended to upgrade to Evolution CMS version 1.4.6 or later. The latest version includes a patch that addresses the input sanitization and validation issues, preventing the execution of stored XSS attacks.
If upgrading to the latest version is not immediately feasible, a temporary workaround can be implemented by manually sanitizing and validating the page weblink title parameter. This can be done by implementing input filtering and encoding techniques to neutralize any potential malicious code.
References
Related vulnerabilities
Recent vulnerabilities recorded for evolutioncms/evolution.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
