Описание
MODX Revolution allows XSS through extended user fields
MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as a Container name or Attribute name.
Пакеты
Наименование
modx/revolution
composer
Затронутые версииВерсия исправления
< 2.7.1-pl
2.7.1-pl
Связанные уязвимости
CVSS3: 6.1
nvd
около 7 лет назад
MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name.