Evolution CMS 3.1.6 PHP Code Injection In Module Parameters is a vulnerability tracked across 1 threat cluster and 1 intelligence report mention on ThreatCluster. First observed May 10, 2026; most recent activity May 10, 2026.
A remote code execution vulnerability (CVE-2021-47939) has been identified in Evolution CMS 3.1.6, allowing authenticated users with module creation permissions to execute arbitrary system commands. The vulnerability is…