medium6.1
CVE-2017-9068
In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by t…
Impact
In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Modx | Modx Revolution | through 2.5.6 |