ModX Revolution 2.2.13

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:modx:modx_revolution:2.2.13:*:*:*:*:*:*:*

part: a version: 2.2.13 update: *

VendorModx (ad4d3009-275e-5405-86b6-7a71a51694e5)
ProductModx Revolution (9f041fb3-9c5f-5cd3-a040-a43b4b44ec62)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/modxcms/revolution purl2cpe 2026-06-01 10:12:38.529354

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2014-8775 vulnerable 2026-06-08 05:06:10.153802 Details available
MODX Revolution 2.x before 2.2.15 does not include the HTTPOnly flag in a Set-Cookie header for the session cookie, which makes it easier for remote attackers to obtain potentially sensitive information via script access to this cookie.
Published: 2014-12-03T18:00:00.000Z
Updated: 2024-08-06T13:26:02.611Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8774 vulnerable 2026-06-08 05:06:10.152573 Details available
Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attackers to inject arbitrary web script or HTML via the context_key parameter.
Published: 2014-12-03T18:00:00.000Z
Updated: 2024-08-06T13:26:02.578Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8773 vulnerable 2026-06-08 05:06:10.150770 Details available
MODX Revolution 2.x before 2.2.15 allows remote attackers to bypass the cross-site request forgery (CSRF) protection mechanism by (1) omitting the CSRF token or via a (2) long string in the CSRF token parameter.
Published: 2014-12-03T18:00:00.000Z
Updated: 2024-08-06T13:26:02.580Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.