MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-2080)

Description

Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter.

Remediation

References

CVE-2014-2080

Related Vulnerabilities

WordPress Plugin bbPress Cross-Site Scripting (2.5.6)

MySQL Improper Privilege Management Vulnerability (CVE-2017-3257)

MediaWiki CVE-2022-28209 Vulnerability (CVE-2022-28209)

Oracle Application Server CVE-2007-5517 Vulnerability (CVE-2007-5517)

Craft CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-37250)

Severity

Medium

Classification

CVE-2014-2080 CWE-707