Modx Revolution
Approved changes feed: RSS · Atom
cpe:2.3:a:modx:modx_revolution:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Modx (ad4d3009-275e-5405-86b6-7a71a51694e5) |
|---|---|
| Product | Modx Revolution (9f041fb3-9c5f-5cd3-a040-a43b4b44ec62) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/modxcms/revolution |
purl2cpe | 2026-06-01 10:12:38.529271 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-1010123 |
vulnerable | 2026-06-08 05:12:21.617523 |
Details available
MODX Revolution Gallery 1.7.0 is affected by: CWE-434: Unrestricted Upload of File with Dangerous Type. The impact is: Creating file with custom a filename and content. The component is: Filtering user parameters before passing them into phpthumb class. The attack vector is: web request via /assets/components/gallery/connector.php.
Published: 2019-07-23T12:36:44.000Z
Updated: 2024-08-05T03:07:18.178Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20758 |
vulnerable | 2026-06-08 05:11:27.838428 |
Details available
MODX Revolution through v2.7.0-pl allows XSS via User Settings such as Description.
Published: 2019-02-06T17:00:00.000Z
Updated: 2024-08-05T12:12:28.297Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20757 |
vulnerable | 2026-06-08 05:11:27.837875 |
Details available
MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name.
Published: 2019-02-06T17:00:00.000Z
Updated: 2024-08-05T12:12:29.321Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20756 |
vulnerable | 2026-06-08 05:11:27.837519 |
Details available
MODX Revolution through v2.7.0-pl allows XSS via a document resource (such as pagetitle), which is mishandled during an Update action, a Quick Edit action, or the viewing of manager logs.
Published: 2019-02-06T17:00:00.000Z
Updated: 2024-08-05T12:12:27.684Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20755 |
vulnerable | 2026-06-08 05:11:27.835162 |
Details available
MODX Revolution through v2.7.0-pl allows XSS via the User Photo field.
Published: 2019-02-06T17:00:00.000Z
Updated: 2024-08-05T12:12:28.737Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000208 |
vulnerable | 2026-06-08 05:10:25.648122 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1000207 |
vulnerable | 2026-06-08 05:10:25.647638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9071 |
vulnerable | 2026-06-08 05:10:09.310490 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9070 |
vulnerable | 2026-06-08 05:10:09.310098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9069 |
vulnerable | 2026-06-08 05:10:09.309649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-9068 |
vulnerable | 2026-06-08 05:10:09.309250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7324 |
vulnerable | 2026-06-08 05:09:55.759035 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7323 |
vulnerable | 2026-06-08 05:09:55.758747 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7322 |
vulnerable | 2026-06-08 05:09:55.758451 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7321 |
vulnerable | 2026-06-08 05:09:55.758108 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-7320 |
vulnerable | 2026-06-08 05:09:55.757602 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-1000223 |
vulnerable | 2026-06-08 05:08:34.282883 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10039 |
vulnerable | 2026-06-08 05:07:17.070333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10038 |
vulnerable | 2026-06-08 05:07:17.069889 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10037 |
vulnerable | 2026-06-08 05:07:17.069333 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-6588 |
vulnerable | 2026-06-08 05:06:52.755526 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2736 |
vulnerable | 2026-06-08 05:05:29.718899 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2014-2080 |
vulnerable | 2026-06-08 05:05:27.516919 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-5278 |
vulnerable | 2026-06-08 04:56:32.619621 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.