MODX Revolution <= 2.3.2 XSS Vulnerability

MODX Revolution is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2014-8992

MODX Revolution 2.3.2-pl contains a cross-site scripting (XSS) flaw in the FileAPI.flash.image.swf component that allows remote attackers to inject arbitrary web script or HTML via the callback parameter. This vulnerability is documented across multiple sources (e.g., NVD/CVE-2014-8992; OpenVAS e...