Description
In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP Host header of a request. This is exploitable only in conjunction with other issues such as Cache Poisoning.
Remediation
References
Related Vulnerabilities
WordPress Plugin Custom Content Type Manager 'upload_form.php' Arbitrary File Upload (0.9.5.13)
WordPress Plugin Image Gallery-Responsive Photo Gallery SQL Injection (1.0.6)
Moodle Other Vulnerability (CVE-2019-10154)
WordPress Plugin BA Book Everything Cross-Site Scripting (1.3.24)
WordPress Plugin Image Slider-Responsive Slider Unspecified Vulnerability (2.4.2)