CVE-2018-20755
1 advisory.
Packagist/modx/revolution CVE-2018-20755: medium 6.1, EPSS 0.86%
MODX Revolution vulnerable to XSS attack through its User Photo field
Action: Upgrade modx/revolution to 2.7.1-pl or later.
composer require modx/revolution:2.7.1-plAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.1-pl | - |
Fixed versions
| 2.7.1-pl |
Sources
- osv: GHSA-q4c2-q63g-62j7
- https://nvd.nist.gov/vuln/detail/CVE-2018-20755
- https://github.com/modxcms/revolution/issues/14102
- https://github.com/modxcms/revolution/pull/14335
- https://github.com/modxcms/revolution/commit/a12920f1698d3be8e6ba07d746da46e511b911b6
- https://github.com/modxcms/revolution
CVE-2018-20755 · published · modified · JSON