CVE-2015-6588

NONE EPSS 64.3%

Published Aug 29, 20178y ago · Modified Jun 17, 20262w ago

Published Aug 29, 2017 8y ago

Last Modified Jun 17, 2026 2w ago

Description

Cross-site scripting (XSS) vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.

Threat Intelligence

EPSS Exploit Probability

64.3% percentile

Exploit & Patch Status

Public Exploit Known

No Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 1

Vendor	Product	Version	Range
modx	modx_revolution	*	≤1.9.0

References 1

packetstormsecurity.com http://packetstormsecurity.com/files/134529/MODX-2.3.5-Cross-Site-Scripting.html

ExploitThird Party AdvisoryVDB Entry

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.