Login Request a demo
RE
Product
Revolution
by Modx · last CVE Feb 26, 2022
3
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 0High 2Medium 0Low 0
Severity
All severities3Critical0High2Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Revolution to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-1000067
8.8
1%
Jul 17
MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in authenticated user accessing database…
Affected: 2.0.0; 2.0.0; 2.0.0; 2.0.0; 2.0.1; 2.1.0; +31 more
CVE-2022-26149
7.2
9%
Feb 26
MODX Revolution through 2.8.3-pl allows remote authenticated administrators to execute arbitrary code by uploading an executable file, because the Uploadable File Types setting…
Affected: through 2.8.3
CVE-2010-4883
–
2%
Oct 7
Cross-site scripting (XSS) vulnerability in manager/index.php in MODx Revolution 2.0.2-pl allows remote attackers to inject arbitrary web script or HTML via the modhash parameter
Affected: 2.0.2-pl
Showing 3