Description
MODX Revolution through v2.7.0-pl allows XSS via the User Photo field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | modx/revolution | < 2.7.1-pl | 2.7.1-pl | GHSA-q4c2-q63g-62j7 |
Medium · 6.1
CVE-2018-20755
EUVD-2018-13298GHSA-q4c2-q63g-62j7
MODX Revolution vulnerable to XSS attack through its User Photo field
Published Feb 6, 2019 · Updated Aug 5, 2024 · Assigned by mitre