GHSA-fpxg-5x79-43rm

ghsaUSosv

MODX Revolution allows XSS via document resources

view advisory published 2022-05-14Licence: CC-BY-4.0

MODX Revolution through v2.7.0-pl allows XSS via a document resource (such as pagetitle), which is mishandled during an Update action, a Quick Edit action, or the viewing of manager logs.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2018-20756US	medium6.1	0.86% (58th)	—	2019-02-06
MODX Revolution through v2.7.0-pl allows XSS via a document resource (such as pagetitle), which is mishandled during an Update action, a Quick Edit action, or the viewing of manage…

references

External citations — patches, advisories, analysis.

https://github.com/modxcms/revolutionPACKAGE
https://github.com/modxcms/revolution/commit/71f894ee55dc4eed10538979761d6c94e8cd1078WEB
https://github.com/modxcms/revolution/issues/14105WEB
https://github.com/modxcms/revolution/pull/14335WEB
https://nvd.nist.gov/vuln/detail/CVE-2018-20756ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan