Vulners
Lucene search
3 matches found
Cross-site Scripting (XSS)
modx/revolution is vulnerable to cross-site scripting XSS. The vulnerability exists through an extended user field such as Container name or Attribute name, allowing XSS attacks...
6.1CVSS5.7AI score0.00861EPSS
Exploits1References3Affected Software1
CVE-2018-20757
MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name...
6.1CVSS6.1AI score0.00861EPSS
Exploits1References1
Design/Logic Flaw
MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name...
4.3CVSS6AI score0.00861EPSS
Exploits1References1Affected Software1
20