MODX Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2015-6588 - Vulnerability Database

MODX

MODX Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2015-6588

Medium

Reference: CVE-2015-6588

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-6588

Title: MODX Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.