717 matches found
CVE-2018-10382
MODX Revolution 2.6.3 has XSS...
CVE-2018-10382
MODX Revolution 2.6.3 has XSS...
CVE-2018-10382
MODX Revolution 2.6.3 has XSS...
CVE-2018-10382
CVE-2018-10382 affects MODX Revolution 2.6.3 and is described as a cross-site scripting (XSS) vulnerability. Connected sources (CNVD, NVD, OSV/OpenVAS) confirm the affected version and the existence of XSS, but do not provide concrete exploitation details, payloads, or official remediation steps ...
PT-2018-9863
Name of the Vulnerable Software and Affected Versions: MODX Revolution version 2.6.3 Description: The issue is related to a Cross-Site Scripting XSS problem. Recommendations: For MODX Revolution version 2.6.3, update to a newer version that contains a fix for this issue...
shop.u-plast.by XSS vulnerability
Open Bug Bounty ID: OBB-570146 Description| Value ---|--- Affected Website:| shop.u-plast.by Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Modx CMS Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
MODX Revolution CMS Cross-Site Scripting Vulnerability
MODX Revolution CMS is a new generation of Web2.0 open source content management system CMS of the U.S. company MODX. The system supports online collaboration , search engine optimization SEO, add-ons and so on. A cross-site scripting vulnerability exists in MODX Revolution CMS 2.5.6 and earlier...
MODX CMS 2.x < 2.5.7 XSS Vulnerability
MODX CMS is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:modx:revolution"; ...
Design/Logic Flaw
A stored web content injection vulnerability WCI, a.k.a XSS is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims' accounts. This can lead to an...
CVE-2017-1000223
A stored web content injection vulnerability WCI, a.k.a XSS is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims' accounts. This can lead to an...
CVE-2017-1000223
A stored web content injection vulnerability WCI, a.k.a XSS is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims' accounts. This can lead to an...
CVE-2017-1000223
A stored web content injection vulnerability WCI, a.k.a XSS is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims' accounts. This can lead to an...
CVE-2017-1000223
MODX Revolution CMS
CVE-2017-1000223
A stored web content injection vulnerability WCI, a.k.a XSS is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims' accounts. This can lead to an...
PT-2017-10919
Name of the Vulnerable Software and Affected Versions MODX Revolution CMS versions 2.5.6 and earlier Description A stored web content injection issue is present, allowing an authenticated user with permissions to edit users to save malicious JavaScript as a User Group name. This could potentially...
CVE-2017-1000223: Improper Neutralization of Input During Web Page Generation
A stored web content injection vulnerability WCI, a.k.a XSS is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims' accounts. This can lead to an...
MODX Revolution Cross-Site Scripting Vulnerability
MODX Revolution is a collection of easy-to-use content management systems CMS and application frameworks. A cross-site scripting vulnerability exists in login-fsp.html in MODX Revolution, which can be exploited by remote attackers to inject arbitrary web script or HTML via QUERYSTRING...
CVE-2015-6588
Cross-site scripting XSS vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...
Cross site scripting
Cross-site scripting XSS vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...