CVE-2018-20756

2019-02-0617:29:00

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

37.3%

JSON

MODX Revolution through v2.7.0-pl allows XSS via a document resource (such as pagetitle), which is mishandled during an Update action, a Quick Edit action, or the viewing of manager logs.

CPENameOperatorVersion
revolutioneq2.2.13-pl
revolutioneq2.1.4-pl
revolutioneq2.2.8-pl
revolutioneq2.2.0-rc1
revolutioneq2.1.0-rc2
revolutioneq2.1.0-pl
revolutioneq2.0.4-pl2
revolutioneq2.3.3-pl
revolutioneq2.0.6-pl2
revolutioneq2.7.0-pl

Name	Operator	Version
revolution	eq	2.2.13-pl
revolution	eq	2.1.4-pl
revolution	eq	2.2.8-pl
revolution	eq	2.2.0-rc1
revolution	eq	2.1.0-rc2
revolution	eq	2.1.0-pl
revolution	eq	2.0.4-pl2
revolution	eq	2.3.3-pl
revolution	eq	2.0.6-pl2
revolution	eq	2.7.0-pl