CVE-2018-17556: XSS
Published Sep 26, 2018
·Updated
MODX Revolution v2.6.5-pl allows stored XSS via a Create New Media Source action.
Affected Software
1 affected component
MODx MODX Revolution=2.6.5-pl
Event History
Sep 26, 2018
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2018-17556?
CVE-2018-17556 is considered a medium severity vulnerability due to its potential for stored XSS attacks.
2
How do I fix CVE-2018-17556?
To fix CVE-2018-17556, upgrade MODX Revolution to version 2.7.0 or later where the vulnerability has been addressed.
3
What versions of MODX Revolution are affected by CVE-2018-17556?
CVE-2018-17556 specifically affects MODX Revolution version 2.6.5-pl.
4
What impact does CVE-2018-17556 have on my application?
CVE-2018-17556 allows an attacker to execute arbitrary JavaScript in the context of a user's session through stored XSS.
5
Is there a proof of concept available for CVE-2018-17556?
Yes, there are discussions regarding the vulnerability including proof of concept examples on various issue tracking platforms.