MODX Revolution Reflected XSS

MEDIO 6.1CVE-2017-9068 · GHSA-vrw6-7vgj-vj7x · Published 18/05/2017 · updated 17/06/2026

In breve

CVE-2017-9068 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda modx/revolution, modx revolution (modx).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.69%, superiore al 52.7% delle vulnerabilità.
Correzione: aggiornare a 2.5.7 o successiva.

Package	Affected versions	Patched versions
modx/revolution Packagist	`< 2.5.7`	`2.5.7`
modx revolution modx	`≤ 2.5.6`	No fix yet

Description

In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.

NVD description

In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.

References

nvd.nist.gov/vuln/detail/CVE-2017-9068 · ADVISORY
modxcms/revolution#13424 · WEB
citadelo.com/en/2017/04/modx-revolution-cms · WEB
modxcms/revolution · PACKAGE
citadelo.com/en/2017/04/modx-revolution-cms · Exploit

Altre vulnerabilità di modx/revolution

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

modx/revolution

Packagist

< 2.5.7

2.5.7

modx revolution

modx

≤ 2.5.6

No fix yet

Description

In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.

NVD description

In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.

Altre vulnerabilità di modx/revolution

Vedi tutto →