Description MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name. Remediation References CVE-2018-20757 Related Vulnerabilities WordPress Plugin Web Forms for Vtiger wordpress Lead capture and Contacts Sync Unspecified Vulnerability (1.0.0) WordPress Plugin BP Code Snippets Cross-Site Scripting (2.0) Oracle Application Server Other Vulnerability (CVE-2007-0283) Oracle JRE CVE-2022-21618 Vulnerability (CVE-2022-21618) Ruby Interpretation Conflict Vulnerability (CVE-2021-33621) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Tags Missing Update Known Vulnerabilities CWE-707 CVE-2018-20757