← All advisories

Moderate severityOSV Advisory· Published Feb 6, 2019· Updated Aug 5, 2024

CVE-2018-20757

CVE-2018-20757

Description

MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
modx/revolutionPackagist	< 2.7.1-pl	2.7.1-pl

Affected products

2

Modxcms/RevolutionOSV
Range: v2.0.1-pl, v2.0.3-pl, v2.0.4-pl, …
ghsa-coords
pkg:composer/modx/revolution
Range: < 2.7.1-pl

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-gm2g-65wj-43g8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20757ghsaADVISORY
github.com/modxcms/revolution/commit/489b13c61673ea0b19124e18cf1f3e7673f8aa64ghsaWEB
github.com/modxcms/revolution/issues/14104ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.