medium4.3
CVE-2011-0741
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) in…
Impact
Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Modxcms | Evolution | through 1.0.4 Versions 0.9.0, 0.9.1, 0.9.2.1, 0.9.5, 0.9.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://modxcms.com/forums/index.php/topic%2C60045.0.html
- http://www.securityfocus.com/bid/46154
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65164
- http://modxcms.com/forums/index.php/topic%2C60045.0.html
- http://www.securityfocus.com/bid/46154
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65164