Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.
oryginał ENCVSS Vector
AV:N/AC:H/Au:N/C:N/I:P/A:NModx Revolution
APPModx2.0.2-pl
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
XSS
CWE
Referencje
Powiązane podatności
CVE-2022-26149HIGH7.2ten sam produkt
MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploa...
CVE-2017-1000067HIGH8.8ten sam produkt
MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by th...
CVE-2020-25911CRITICAL9.1ten sam vendor
A XML External Entity (XXE) vulnerability was discovered in the modRestServiceRequest component in MODX CMS 2....
CVE-2019-1010178CRITICAL9.8ten sam vendor
Fred MODX Revolution < 1.0.0-beta5 is affected by: Incorrect Access Control - CWE-648. The impact is: Remote C...
CVE-2017-7324CRITICAL9.8ten sam vendor
setup/templates/findcore.php in MODX Revolution 2.5.4-pl and earlier allows remote attackers to execute arbitr...