Unrated severityNVD Advisory· Published Dec 22, 2014· Updated May 6, 2026
CVE-2014-8992
CVE-2014-8992
Description
Cross-site scripting (XSS) vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution 2.3.2-pl allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
Affected products
1- cpe:2.3:a:modx:modx_revolution:2.3.2:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.