medium5.4
CVE-2018-17556
MODX Revolution v2.6.5-pl allows stored XSS via a Create New Media Source action.
Impact
MODX Revolution v2.6.5-pl allows stored XSS via a Create New Media Source action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Modx | Modx Revolution | Version 2.6.5 |