CVE-2017-9070

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to…

published May 18, 2017

CVSS
—
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to connectors/index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00563 · 45.7th percentile
Published
2017-05-18T16:00Z
EPSS history
Timeline
  • 18 MAY 16:00Z
    In MODX Revolution before 2.5.7, a user with resource edit permissions can inject an XSS payload into the title of any post via the pagetitle parameter to…
    cvelistv5