Description
Cross-site scripting (XSS) vulnerability in manager/assets/fileapi/FileAPI.flash.image.swf in MODX Revolution 2.3.2-pl allows remote attackers to inject arbitrary web script or HTML via the callback parameter.
Remediation
References
Related Vulnerabilities
MySQL CVE-2024-21237 Vulnerability (CVE-2024-21237)
Oracle JRE CVE-2013-0809 Vulnerability (CVE-2013-0809)
WordPress Plugin Facebook With Login Multiple Vulnerabilities (1.0)
WordPress Plugin Htaccess by BestWebSoft Cross-Site Scripting (1.7.5)
WordPress Plugin Football Pool Arbitrary File Upload (2.6.3)