Description
Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attackers to inject arbitrary web script or HTML via the context_key parameter.
Remediation
References
Related Vulnerabilities
TYPO3 Improper Input Validation Vulnerability (CVE-2015-8760)
Oracle Application Server Other Vulnerability (CVE-2005-2093)
MySQL CVE-2015-4890 Vulnerability (CVE-2015-4890)
Dolibarr Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2019-11201)
Moodle Improper Control of Generation of Code (Code Injection) (CVE-2019-14827)