CVE-2018-20757
1 advisory.
Packagist/modx/revolution CVE-2018-20757: medium 6.1, EPSS 0.86%
MODX Revolution allows XSS through extended user fields
Action: Upgrade modx/revolution to 2.7.1-pl or later.
composer require modx/revolution:2.7.1-plAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.1-pl | - |
Fixed versions
| 2.7.1-pl |
Sources
- osv: GHSA-gm2g-65wj-43g8
- https://nvd.nist.gov/vuln/detail/CVE-2018-20757
- https://github.com/modxcms/revolution/issues/14104
- https://github.com/modxcms/revolution/commit/489b13c61673ea0b19124e18cf1f3e7673f8aa64
- https://github.com/modxcms/revolution
CVE-2018-20757 · published · modified · JSON