p PatchFirst

CVE-2017-9071

CVE-2017-9071

This page contains facts from public vulnerability sources. Check the original advisory before updating.

In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP Host header of a request. This is exploitable only in conjunction with other issues such as Cache Poisoning.

CVSS 4.7 · Medium · EPSS 0.6% · Fix available

Published
Updated

Stack: php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • modx/revolution Packagist

    Affected ranges
    • ECOSYSTEM: < 2.5.7

    Update to 2.5.7

Original sources

Check your server →