CVE-2017-9070

2022-10-0316:23:07

mitre

www.cve.org

modx revolution

xss

vulnerability

resource title

connectors.

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

JSON

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php.

References

citadelo.com/en/2017/04/modx-revolution-cms/

github.com/modxcms/revolution/pull/13415