CVE-2017-9068

In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by…

published May 18, 2017

CVSS
—
EPSS
1%
Percentile
51.8
In the wild
Unconfirmed
What it is

In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by the database_type parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00686 · 51.8th percentile
Published
2017-05-18T16:00Z
EPSS history
Timeline
  • 18 MAY 16:00Z
    In MODX Revolution before 2.5.7, an attacker is able to trigger Reflected XSS by injecting payloads into several fields on the setup page, as demonstrated by…
    cvelistv5