Executive brief
MODX Revolution vulnerable to XSS attack through its User Photo field
Affected products
- Packagist modx/revolution
Junglewise Threat Intelligence
CVE-2018-20755 · Severity: low · CVSS 3 · Published 2022-05-14
Technologies: modx/revolution (Packagist). Vendors: Packagist.
MODX Revolution vulnerable to XSS attack through its User Photo field