CVE-2018-20755

MEDIUM

MODX Revolution vulnerable to XSS attack through its User Photo field

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2018-20755 has a selected CVSS score of 6.1 (medium).

Description

MODX Revolution through v2.7.0-pl allows XSS via the User Photo field.

Description source: CVE List

Affected products and versions

1
ProductSourceVersion range

modx/revolution

Browse Packagist / modx/revolution
GitHub AdvisoryBefore 2.7.1-pl · Fixed in 2.7.1-plaffected

References

5