Description
Cross-site scripting (XSS) vulnerability in manager/index.php in MODX Revolution 2.x before 2.2.15 allows remote attackers to inject arbitrary web script or HTML via the context_key parameter.
Remediation
References
Related Vulnerabilities
WordPress Plugin NextGEN Gallery-WordPress Gallery 'xml/media-rss.php' Cross-Site Scripting (1.5.1)
Internet Information Services CVE-2008-0074 Vulnerability (CVE-2008-0074)
WordPress Plugin LearnDash LMS Multiple Information Disclosure Vulnerabilities (4.10.2)
Apache Tomcat Missing Critical Step in Authentication Vulnerability (CVE-2026-55957)
WordPress Plugin bodi0`s Easy cache Cross-Site Scripting (0.8)