CVE-2017-20155

CVE-2017-20155 affects Sterc Google Analytics Dashboard for MODX up to 1.0.5. The vulnerability resides in the Internal Search widget: file core/components/analyticsdashboardwidget/elements/tpl/widget.analytics.tpl, enabling cross-site scripting. An attacker can exploit it remotely. A fix is avai...