Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-8773.
AI-analyzed exploit summary This advisory details multiple vulnerabilities in MODX Revolution, including CSRF token bypass, reflected XSS via the 'context_key' parameter, and stored XSS via the 'context' parameter. It provides technical details on exploitation methods and affected URLs.
Description
MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism by (1) omitting the CSRF token or via a (2) long string in the CSRF token parameter.
Exploits (1)
This advisory details multiple vulnerabilities in MODX Revolution, including CSRF token bypass, reflected XSS via the 'context_key' parameter, and stored XSS via the 'context' parameter. It provides technical details on exploitation methods and affected URLs.