Welcome to the Evolution CMS. The world’s fastest, most customizable Open Source PHP CMS. Your creative vision, no restrictions, no compromise.
45%
Total Score
75
100
83
90
Packagist marks the package as abandoned, with no replacement specified. This is a severe lifecycle warning and materially undermines confidence in adopting this release.
The repository reports 0 commits and 0 active maintainers over the last 3 months, indicating possible maintenance collapse. Recent pull-request activity and a recent push provide some conflicting evidence, but do not remove the concern.
The repository uses Composer for builds, but no security-scanning tools were detected. The build tooling is appropriate, while the missing scanning is a transparency and security-hygiene gap.
No repository security policy was found. This weakens vulnerability-reporting transparency, although it is a hygiene concern rather than evidence of abandonment on its own.
| Title | Versions | Severity |
|---|---|---|
CVE-2023-43340 evolutioncms/evolution is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 3.2.3. | 0.0.0 - 3.2.3 | Medium |
CVE-2023-43341 evolutioncms/evolution is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 3.2.3. | 0.0.0 - 3.2.3 | Medium |
CVE-2018-16638 evolutioncms/evolution is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 1.4.0 - 1.4.6. | 1.4.0 - 1.4.6 | Medium |
CVE-2018-16637 evolutioncms/evolution is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 1.4 - 1.4.6. | 1.4 - 1.4.6 | Medium |
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.