medium5.4
CVE-2018-20758
MODX vulnerability allows for XSS via user settings parameters
Impact
MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | modx/revolution | < 2.7.1-pl | 2.7.1-pl |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Modx | Modx Revolution | through 2.7.0 |