Lucene search

K
jvnJapan Vulnerability NotesJVN:10170564
HistoryJan 09, 2009 - 12:00 a.m.

JVN#10170564 MODx cross-site scripting vulnerability

2009-01-0900:00:00
Japan Vulnerability Notes
jvn.jp
14

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%

MODx, an open source contents management system, contains multiple cross-site scripting vulnerabilities.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the Software
Apply the latest update provided by the developer.

Products Affected

  • MODx 0.9.6.2 and earlier

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.5%

Related for JVN:10170564