MODX Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-8992 - Vulnerability Database

MODX

MODX Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2014-8992

Medium

Reference: CVE-2014-8992

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-8992

Title: MODX Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution 2.3.2-pl allows remote attackers to inject arbitrary web script or HTML via the callback parameter.