3 matches found
CVE-2018-20755
MODX Revolution through v2.7.0-pl allows XSS via the User Photo field...
6.1CVSS6AI score0.00857EPSS
SaveExploits1References1
CVE-2018-20755
MODX Revolution (through v2.7.0-pl) is vulnerable to Cross-site Scripting (XSS) via the User Photo field. The root cause is improper handling of input in the user photo workflow (e.g., getProfilePhoto-related path) that allows injected scripts to be rendered in a user’s browser context. Exploitat...
6.1CVSS5.6AI score0.00857EPSS
SaveExploits1References1Affected Software1
20