CVE-2018-20756
1 advisory.
Packagist/modx/revolution CVE-2018-20756: medium 6.1, EPSS 0.86%
MODX Revolution allows XSS via document resources
Action: Upgrade modx/revolution to 2.7.1-pl or later.
composer require modx/revolution:2.7.1-plAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.1-pl | - |
Fixed versions
| 2.7.1-pl |
Sources
- osv: GHSA-fpxg-5x79-43rm
- https://nvd.nist.gov/vuln/detail/CVE-2018-20756
- https://github.com/modxcms/revolution/issues/14105
- https://github.com/modxcms/revolution/pull/14335
- https://github.com/modxcms/revolution/commit/71f894ee55dc4eed10538979761d6c94e8cd1078
- https://github.com/modxcms/revolution
CVE-2018-20756 · published · modified · JSON