MediumCVSS 5.4
EPSS 0.58%
PoC
Evolution CMS 1.4.x allows XSS via the manager/ search parameter.
Product
2 published CVES affecting modx evolution cms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
Newest publication first
Evolution CMS 1.4.x allows XSS via the manager/ search parameter.
Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.