LOW🇵🇱 Wersja polska

CVE-2010-4883

CVSS 2.6v2.0pub. 2011-10-07upd. 2026-04-29

Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.

CVSS Vector
AV:N/AC:H/Au:N/C:N/I:P/A:N

  • Modx Revolution

    APP
    Modx
    2.0.2-pl
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2022-26149HIGH7.2same product

MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploa...

CVE-2017-1000067HIGH8.8same product

MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by th...

CVE-2020-25911CRITICAL9.1PL ✓same vendor

XXE w MODX CMS — ujawnienie informacji lub atak DoS

CVE-2019-1010178CRITICAL9.8PL ✓same vendor

RCE w Fred MODX Revolution — nieprawidłowa kontrola dostępu w elFinder

CVE-2017-7324CRITICAL9.8PL ✓same vendor

RCE w MODX Revolution — wykonanie kodu PHP przez setup/templates/findcore.php