modx/revolution vulnerabilities (Packagist)

14 vulnerabilities.

• modx/revolution Packagist MODX allows cross-site scripting (XSS) via an SVG file CVE-2025-28010 5.4 MediumMarch 13, 2025
• modx/revolution Packagist Unrestricted Upload of File with Dangerous Type in MODX Revolution CVE-2022-26149 Public exploit 7.2 HighFebruary 26, 2022
• modx/revolution Packagist XML External Entity vulnerability in MODX CMS CVE-2020-25911 Fix available 9.1 CriticalOctober 31, 2021
• modx/revolution Packagist MODX vulnerability allows for XSS via user settings parameters CVE-2018-20758 Fix available 5.4 MediumFebruary 6, 2019
• modx/revolution Packagist MODX Revolution allows XSS through extended user fields CVE-2018-20757 Fix available 6.1 MediumFebruary 6, 2019
• modx/revolution Packagist MODX Revolution allows XSS via document resources CVE-2018-20756 Fix available 6.1 MediumFebruary 6, 2019
• modx/revolution Packagist MODX Revolution vulnerable to XSS attack through its User Photo field CVE-2018-20755 Fix available 6.1 MediumFebruary 6, 2019
• modx/revolution Packagist MODX Revolution Incorrect Access Control vulnerability CVE-2018-1000207 Fix available EPSS 64.1% 7.2 HighJuly 13, 2018
• modx/revolution Packagist MODX Revolution blind SQL injection CVE-2017-1000067 Fix available 8.8 HighJuly 13, 2017
• modx/revolution Packagist MODX Revolution XSS via HTTP Host header CVE-2017-9071 Fix available 4.7 MediumMay 18, 2017
• modx/revolution Packagist MODX Revolution cross-site scripting vulnerability CVE-2017-9070 Fix available 5.4 MediumMay 18, 2017
• modx/revolution Packagist MODX Revolution allows overwriting .htaccess CVE-2017-9069 Fix available 8.8 HighMay 18, 2017
• modx/revolution Packagist MODX Revolution Reflected XSS CVE-2017-9068 Fix available 6.1 MediumMay 18, 2017
• modx/revolution Packagist MODX Revolution Directory Traversal Vulnerability CVE-2017-9067 Fix available 7.0 HighMay 18, 2017