CVE-2017-9070

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php...

GHSA-7HHG-XJ2H-5VQ9 MODX Revolution cross-site scripting vulnerability

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php...

MODX Revolution cross-site scripting vulnerability

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php...

Cross site scripting

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php...

PT-2017-18686

Name of the Vulnerable Software and Affected Versions MODX Revolution versions prior to 2.5.7 Description The issue allows a user with resource edit permissions to inject an XSS payload into the title of any post via the "connectors/index.php" endpoint, specifically through the pagetitle paramete...