4 matches found
Cross-site Scripting (XSS)
modx/revolution is vulnerable to cross-site scripting XSS. The vulnerability exists through an extended user field such as Container name or Attribute name, allowing XSS attacks...
6.1CVSS5.7AI score0.00857EPSS
SaveExploits1References3Affected Software1
Design/Logic Flaw
MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name...
4.3CVSS6AI score0.00857EPSS
SaveExploits1References1Affected Software1
CVE-2018-20757
MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name...
6.1CVSS6.1AI score0.00857EPSS
SaveExploits1References1
CVE-2018-20757: Improper Neutralization of Input During Web Page Generation
MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name...
6.1CVSS5.7AI score0.00857EPSS
SaveExploits1References2
20