Description
MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in authenticated user accessing database and possibly escalating privileges.
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Digital Downloads QR Code Cross-Site Scripting (1.1.0)
Undertow Uncontrolled Resource Consumption Vulnerability (CVE-2021-3629)
WordPress Plugin Product list Widget for Woocommerce Cross-Site Scripting (1.0)
WordPress Plugin AdPlugg WordPress Ad Cross-Site Scripting (1.1.33)
Envoy Proxy Incomplete Cleanup Vulnerability (CVE-2023-35945)