CVE-2018-20758
1 advisory.
Packagist/modx/revolution CVE-2018-20758: medium 5.4, EPSS 0.61%
MODX vulnerability allows for XSS via user settings parameters
Action: Upgrade modx/revolution to 2.7.1-pl or later.
composer require modx/revolution:2.7.1-plAffected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.1-pl | - |
Fixed versions
| 2.7.1-pl |
Sources
- osv: GHSA-vwqw-wfhv-2xcq
- https://nvd.nist.gov/vuln/detail/CVE-2018-20758
- https://github.com/modxcms/revolution/issues/14103
- https://github.com/modxcms/revolution/commit/c08fb7c7a1f5979ff1241a7b28ae0f7690756ad3
- https://github.com/modxcms/revolution
CVE-2018-20758 · published · modified · JSON