Description
MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | modx/revolution | < 2.7.1-pl | 2.7.1-pl | GHSA-vwqw-wfhv-2xcq |
Medium · 5.4
CVE-2018-20758
EUVD-2018-13301GHSA-vwqw-wfhv-2xcq
MODX vulnerability allows for XSS via user settings parameters
Published Feb 6, 2019 · Updated Aug 5, 2024 · Assigned by mitre