Modx Evolution Cms — known CVE vulnerabilities

Every CVE whose affected-product data names Modx Evolution Cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-16637 — CVSS 5.4 (medium): Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.
• CVE-2018-16638 — CVSS 5.4 (medium): Evolution CMS 1.4.x allows XSS via the manager/ search parameter.
• CVE-2019-14518 — CVSS 5.4 (medium): Evolution CMS 2.0.x allows XSS via a description and new category location in a template. NOTE: the vendor states that the behavior is…