Skip to content

CVE-2017-11744 In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when th...

MediumCVSS 6.1 EPSS 0.60%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

In MODX Revolution 2.5.7, the "key" and "name" parameters in the System Settings module are vulnerable to XSS. A malicious payload sent to connectors/index.php will be triggered by every user, when they visit this module.

Affected products

ProductAffected versionsFixed in
modx revolution = 2.5.7 No fix listed

References

  • github.com issue-tracking patch third-party-advisory