Agelxnasho

#22741of 56,330
11.5Total CVSS
Vulnerabilities · 2
Medium
2
PT-2019-10203
6.1
2019-02-06
Modx · Modx Revolution · CVE-2018-20755
Name of the Vulnerable Software and Affected Versions: MODX Revolution versions prior to v2.7.0-pl Description: The issue allows for XSS attacks via the User Photo field. Recommendations: For MODX Revolution versions prior to v2.7.0-pl, update to a version that contains a fix for this issue.
PT-2019-10206
5.4
2019-02-06
Modx · Modx Revolution · CVE-2018-20758
Name of the Vulnerable Software and Affected Versions: MODX Revolution versions prior to v2.7.0-pl Description: The issue allows for XSS attacks via User Settings, such as the Description field. Recommendations: For MODX Revolution versions prior to v2.7.0-pl, update to a version that contains a fix for this issue.