CVE-2018-20758

MEDIUM

MODX vulnerability allows for XSS via user settings parameters

Title source: GitHub Advisory
STIX 2.1 vulnerability

Record summary

CVE-2018-20758 has a selected CVSS score of 5.4 (medium).

Description

MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description.

Description source: CVE List

Affected products and versions

1
ProductSourceVersion range

modx/revolution

Browse Packagist / modx/revolution
GitHub AdvisoryBefore 2.7.1-pl · Fixed in 2.7.1-plaffected

References

4