MODX vulnerability allows for XSS via user settings parameters

MEDIO 5.4CVE-2018-20758 · GHSA-vwqw-wfhv-2xcq · Published 06/02/2019 · updated 17/06/2026

In breve

CVE-2018-20758 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda modx/revolution, modx revolution (modx).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.61%, superiore al 49.0% delle vulnerabilità.
Correzione: aggiornare a 2.7.1-pl o successiva.

Package	Affected versions	Patched versions
modx/revolution Packagist	`< 2.7.1-pl`	`2.7.1-pl`
modx revolution modx	`≤ 2.7.0`	No fix yet

MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description.

NVD description

MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.7.1-pl

2.7.1-pl

≤ 2.7.0

No fix yet

Altre vulnerabilità di modx/revolution

Vedi tutto →