Lucene search
Veracode Vulnerability DatabaseVERACODE:13309HistoryFeb 07, 2019 - 2:02 a.m.
Cross-site Scripting (XSS)
2019-02-0702:02:40
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
37.3%
modx/revolution is vulnerable to cross-site scripting (XSS). The vulnerability exists through an extended user field such as Container name or Attribute name, allowing XSS attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| modx/revolution | eq | 2.7.0-pl |
Related
cve
cve
CVE-2018-20757
2019-02-06 17:29:00
cvelist
cvelist
CVE-2018-20757
2019-02-06 17:00:00
nvd
nvd
CVE-2018-20757
2019-02-06 17:29:00
osv
osv
CVE-2018-20757
2019-02-06 17:29:00
prion
prion
Design/Logic Flaw
2019-02-06 17:29:00
openvas
openvas
MODX Revolution CMS < 2.7.1 Multiple XSS Vulnerabilities
2019-02-07 00:00:00