Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2014-2080
4.3
MEDIUMCVSS v2
Published
March 1, 2014
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter.
GitHub