CVE-2015-6588

CVE-2015-6588 affects MODX Revolution with an XSS in login-fsp.html (pre-1.9.1). The underlying issue is that the QUERY_STRING is not properly sanitized, allowing remote attackers to inject arbitrary script/HTML. Practical impact is user interaction is not required, but the attack occurs via craf...

PT-2017-7039

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 1.9.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the QUERY STRING in the login-fsp.html file. Recommendations For versions prior to 1.9.1,...

CVE-2015-6588: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the QUERYSTRING...