Lucene search
PRIOn knowledge basePRION:CVE-2017-1000223HistoryNov 17, 2017 - 5:29 a.m.
Design/Logic Flaw
2017-11-1705:29:00
PRIOn knowledge base
www.prio-n.com
2
A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims’ accounts. This can lead to an escalation of privileges providing complete administrative control over the CMS.
| CPE | Name | Operator | Version |
|---|---|---|---|
| modx_revolution | le | 2.5.6 |
Related
cve
cve
CVE-2017-1000223
2022-10-03 16:23:10
nvd
nvd
CVE-2017-1000223
2017-11-17 05:29:00
openvas
openvas
MODX Revolution CMS XSS Vulnerability
2017-11-24 00:00:00
cvelist
cvelist
CVE-2017-1000223
2022-10-03 16:23:10
osv
osv
CVE-2017-1000223
2017-11-17 05:29:00