← All advisories

Moderate severityOSV Advisory· Published Feb 6, 2019· Updated Aug 5, 2024

CVE-2018-20758

CVE-2018-20758

Description

MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
modx/revolutionPackagist	< 2.7.1-pl	2.7.1-pl

Affected products

2

Modxcms/RevolutionOSV
Range: v2.0.1-pl, v2.0.3-pl, v2.0.4-pl, …
ghsa-coords
pkg:composer/modx/revolution
Range: < 2.7.1-pl

Patches

Vulnerability mechanics

References

4

github.com/advisories/GHSA-vwqw-wfhv-2xcqghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2018-20758ghsaADVISORY
github.com/modxcms/revolution/commit/c08fb7c7a1f5979ff1241a7b28ae0f7690756ad3ghsaWEB
github.com/modxcms/revolution/issues/14103ghsax_refsource_MISCWEB

News mentions

0

No linked articles in our index yet.