Security
فارسی
All products

modx/revolution

Composer · Package
14 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
MODX allows cross-site scripting (XSS) via an SVG fileCVE-2025-28010 · GHSA-HM54-FG2W-2G6J modx/revolution Composer Low No fix reported
MODX Revolution allows XSS via document resourcesCVE-2018-20756 · GHSA-FPXG-5X79-43RM modx/revolution Composer Medium Fix reported
MODX Revolution allows XSS through extended user fieldsCVE-2018-20757 · GHSA-GM2G-65WJ-43G8 modx/revolution Composer Medium Fix reported
MODX Revolution vulnerable to XSS attack through its User Photo fieldCVE-2018-20755 · GHSA-Q4C2-Q63G-62J7 modx/revolution Composer Medium Fix reported
MODX vulnerability allows for XSS via user settings parametersCVE-2018-20758 · GHSA-VWQW-WFHV-2XCQ modx/revolution Composer Medium Fix reported
MODX Revolution cross-site scripting vulnerabilityCVE-2017-9070 · GHSA-7HHG-XJ2H-5VQ9 modx/revolution Composer Medium Fix reported
MODX Revolution allows overwriting .htaccessCVE-2017-9069 · GHSA-23GJ-X27G-R34F modx/revolution Composer High Fix reported
MODX Revolution Directory Traversal VulnerabilityCVE-2017-9067 · GHSA-CGRV-6H2H-6F7V modx/revolution Composer High Fix reported
MODX Revolution Reflected XSSCVE-2017-9068 · GHSA-VRW6-7VGJ-VJ7X modx/revolution Composer Medium Fix reported
MODX Revolution XSS via HTTP Host headerCVE-2017-9071 · GHSA-P2J4-VRGX-96QG modx/revolution Composer Medium Fix reported
MODX Revolution blind SQL injectionCVE-2017-1000067 · GHSA-PHHM-6PGM-MXW9 modx/revolution Composer High Fix reported
Unrestricted Upload of File with Dangerous Type in MODX RevolutionCVE-2022-26149 · GHSA-J8JP-9X42-4PJ5 modx/revolution Composer High No fix reported
MODX Revolution Incorrect Access Control vulnerabilityCVE-2018-1000207 · GHSA-M899-6MH4-MPC5 modx/revolution Composer High Fix reported
XML External Entity vulnerability in MODX CMSCVE-2020-25911 · GHSA-VHFP-9WVJ-GWVG modx/revolution Composer Critical Fix reported