Unscored severity · published Oct 7, 2011
CVE-2010-4883
Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter
–
CVSS
2%
EPSS
No
On KEV
Description
Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 80% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RE
Revolution · Modx
2.0.2-pl · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4883
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4883
modxcms.com
http://modxcms.com/forums/index.php/topic%2C55104.0.html
modxcms.com
http://modxcms.com/forums/index.php/topic%2C55105.0.html
Exploit
http://packetstormsecurity.org/1009-exploits/modx202pl-xss.txt
Vendor Advisory
http://secunia.com/advisories/41638
securityreason.com
http://securityreason.com/securityalert/8435
Exploit
http://www.osvdb.org/68264
More from Revolution
8.8
CVE-2017-1000067
MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in authenticated user accessing database…
7.2
CVE-2022-26149
MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting…