Description
Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.
References
- JVNDB-2010-000013 third-party-advisory
- 39298 third-party-advisory
- modx-unspecified-xss(57635) vdb-entry
- JVN#46669729 third-party-advisory
- http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304