Lucene search

PRIOn knowledge basePRION:CVE-2014-2080

HistoryMar 01, 2014 - 12:01 a.m.

Cross site scripting

2014-03-0100:01:00

PRIOn knowledge base

www.prio-n.com

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.4%

JSON

Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the “a” parameter.

CPENameOperatorVersion
modx_revolutioneq2.2.9
modx_revolutioneq2.0.4
modx_revolutioneq2.0.7
modx_revolutioneq2.2.8
modx_revolutioneq2.0.3
modx_revolutioneq2.1.5
modx_revolutioneq2.1.3
modx_revolutioneq2.2.6
modx_revolutioneq2.2.3
modx_revolutioneq2.1.4

Name	Operator	Version
modx_revolution	eq	2.2.9
modx_revolution	eq	2.0.4
modx_revolution	eq	2.0.7
modx_revolution	eq	2.2.8
modx_revolution	eq	2.0.3
modx_revolution	eq	2.1.5
modx_revolution	eq	2.1.3
modx_revolution	eq	2.2.6
modx_revolution	eq	2.2.3
modx_revolution	eq	2.1.4

Rows per page:

1-10 of 261

References

modx.com/blog/2014/01/21/revolution-2.2.11%E2%80%94security-fixes-and-prevent-change-loss

seclists.org/oss-sec/2014/q1/431

secunia.com/advisories/57038

www.securityfocus.com/bid/65755

github.com/modxcms/revolution/commit/77463eb6a8090f474b04fdc1b72225cb93c558ea

6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

74.4%

JSON

Related for PRION:CVE-2014-2080