CVE-2025-28010
1 advisory.
Packagist/modx/revolution CVE-2025-28010: medium 5.4
MODX allows cross-site scripting (XSS) via an SVG file
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 3.1.0 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-hm54-fg2w-2g6j
- https://nvd.nist.gov/vuln/detail/CVE-2025-28010
- https://github.com/modxcms/revolution
- https://github.com/rtnthakur/CVE/blob/main/MODX/README.md
CVE-2025-28010 · published · modified · JSON