CVE-2018-20756

NONE EPSS 53.9%
Published Feb 6, 20197y ago · Modified Jun 17, 20262w ago
Find Similar
Published Feb 6, 2019 7y ago
Last Modified Jun 17, 2026 2w ago

Description

MODX Revolution through v2.7.0-pl allows XSS via a document resource (such as pagetitle), which is mishandled during an Update action, a Quick Edit action, or the viewing of manager logs.

Threat Intelligence

EPSS Exploit Probability
53.9% percentile
Exploit & Patch Status
Public Exploit Known
Patch Available

Weaknesses 1

CWE-79 Cross-site Scripting Injection

Affected Products 2

VendorProductVersionRange
modxmodx_revolution* ≤2.7.0
modxmodx_revolution2.7.0any

References 1

  • github.com https://github.com/modxcms/revolution/issues/14105
    ExploitPatchThird Party Advisory

Remediation

  • github.com https://github.com/modxcms/revolution/issues/14105
    ExploitPatchThird Party Advisory