CVE-2018-20757

MEDIUM

MODX Revolution allows XSS through extended user fields

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2018-20757 has a selected CVSS score of 6.1 (medium).

Description

MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name.

Description source: CVE List

Affected products and versions

1
ProductSourceVersion range

modx/revolution

Browse Packagist / modx/revolution
GitHub AdvisoryBefore 2.7.1-pl · Fixed in 2.7.1-plaffected

References

4