{"action":"Upgrade modx/revolution to 2.7.1-pl or later.","affected":[{"fixed":"2.7.1-pl","introduced":"0"}],"component":"modx/revolution","cve_ids":["CVE-2018-20756"],"ecosystem":"Packagist","epss":0.00857,"exploited":false,"fixed_versions":["2.7.1-pl"],"ghsa_id":"GHSA-fpxg-5x79-43rm","id":"tcs_01M5KF1Z0V23TTDYQ1PZ00GB54","modified_at":"2025-07-11T23:27:44.129511Z","published_at":"2022-05-14T01:36:14Z","references":["https://osv.dev/vulnerability/GHSA-fpxg-5x79-43rm","https://nvd.nist.gov/vuln/detail/CVE-2018-20756","https://github.com/modxcms/revolution/issues/14105","https://github.com/modxcms/revolution/pull/14335","https://github.com/modxcms/revolution/commit/71f894ee55dc4eed10538979761d6c94e8cd1078","https://github.com/modxcms/revolution"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-fpxg-5x79-43rm","url":"https://osv.dev/vulnerability/GHSA-fpxg-5x79-43rm"}],"summary":"MODX Revolution allows XSS via document resources"}