← All advisories

Moderate severityOSV Advisory· Published Feb 6, 2019· Updated Aug 5, 2024

CVE-2018-20755

CVE-2018-20755

Description

MODX Revolution through v2.7.0-pl allows XSS via the User Photo field.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
modx/revolutionPackagist	< 2.7.1-pl	2.7.1-pl

Affected products

2

Modxcms/RevolutionOSV
Range: v2.0.1-pl, v2.0.3-pl, v2.0.4-pl, …
ghsa-coords
pkg:composer/modx/revolution
Range: < 2.7.1-pl

Patches

Vulnerability mechanics

References

5

github.com/advisories/GHSA-q4c2-q63g-62j7ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20755ghsaADVISORY
github.com/modxcms/revolution/commit/a12920f1698d3be8e6ba07d746da46e511b911b6ghsaWEB
github.com/modxcms/revolution/issues/14102ghsax_refsource_MISCWEB
github.com/modxcms/revolution/pull/14335ghsaWEB

News mentions

0

No linked articles in our index yet.