CVE-2020-22839: b2evolution CMS

Medium severity, CVSS 6.1. EPSS: 4.5% chance of exploitation in the next 30 days.

Reflected cross-site scripting vulnerability (XSS) in the evoadm.php file in b2evolution cms version 6.11.6-stable allows remote attackers to inject arbitrary webscript or HTML code via the tab3 parameter.

Affected products

• b2evolution b2evolution CMS: version 6.11.6 only

Published 2021-02-09. Last modified 2026-06-17.