Executive brief
MODX allows cross-site scripting (XSS) via an SVG file
Affected products
- Packagist modx/revolution
Junglewise Threat Intelligence
CVE-2025-28010: MODX allows cross-site scripting (XSS) via an SVG file
CVE-2025-28010 · Severity: low · CVSS 3.1 · Published 2025-03-13
Technologies: modx/revolution (Packagist). Vendors: Packagist.