CVE-2017-9068
CVE-2017-9068
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.
CVSS 6.1 · Medium · EPSS 0.7% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
modx/revolution Packagist
- Affected ranges
- ECOSYSTEM: < 2.5.7
Update to 2.5.7