Evolution

evolution

Vendor: Modxcms • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2011-0741 1Modxcms 1Evolution Apr 29, 2026 Feb 2, 2011 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
CVE-2010-3930 1Modxcms 1Evolution Apr 29, 2026 Feb 2, 2011 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to read arbitrary files via unspecified vectors related to AjaxSearch, a different vulnerability than CVE-2010-1427.
CVE-2010-3929 1Modxcms 1Evolution Apr 29, 2026 Feb 2, 2011 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in MODx Evolution 1.0.4 and earlier allows remote attackers to execute arbitrary SQL commands via unknown vectors related to AjaxSearch.
CVE-2010-1427 1Modxcms 1Evolution Apr 29, 2026 Apr 15, 2010 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.