← All advisories

Medium severity5.4OSV Advisory· Published Sep 26, 2018· Updated Jun 17, 2026

CVE-2018-17556

CVE-2018-17556

Description

MODX Revolution v2.6.5-pl allows stored XSS via a Create New Media Source action.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Modxcms/RevolutionOSV2 versions
v2.0.1-pl, v2.0.3-pl, v2.0.4-pl, …+ 1 more
- (no CPE)range: v2.0.1-pl, v2.0.3-pl, v2.0.4-pl, …
- (no CPE)range: =2.6.5-pl

Patches

Vulnerability mechanics

References

1

github.com/modxcms/revolution/issues/14094nvdIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.