Description

Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.

Remediation

References

CVE-2010-4883

Related Vulnerabilities

MySQL CVE-2024-21212 Vulnerability (CVE-2024-21212)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2040)

WordPress Plugin HTML5 Video Player-Best WordPress Video Player and Block SQL Injection (2.5.24)

WordPress Plugin MC4WP:Mailchimp for WordPress Cross-Site Scripting (2.2.7)

SharePoint Server-Side Request Forgery (SSRF) Vulnerability (CVE-2025-53760)

Severity

Low

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2010-4883