Description
MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | modx/revolution | < 2.7.1-pl | 2.7.1-pl | GHSA-gm2g-65wj-43g8 |
Medium · 6.1
CVE-2018-20757
EUVD-2018-13300GHSA-gm2g-65wj-43g8
MODX Revolution allows XSS through extended user fields
Published Feb 6, 2019 · Updated Aug 5, 2024 · Assigned by mitre