CVE-2017-9068 MODX Revolution Reflected XSS
MediumCVSS 6.1
EPSS 0.69%
- Published
- Updated
- Exploit status
- No public exploit known
Description
In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| modx/revolution(Packagist) | < 2.5.7 | 2.5.7 |
| modx revolution | <= 2.5.6 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- citadelo.com exploit patch third-party-advisory
- github.com product
- github.com