HIGH8.8Packagist
GHSA-23gj-x27g-r34f· CVE-2017-9069MODX Revolution allows overwriting .htaccess
Modified: 4/22/2025
package
Packagist/modx/revolution
pkg:packagist/modx/revolution
MEDIUM5.4Packagist
GHSA-7hhg-xj2h-5vq9· CVE-2017-9070MODX Revolution cross-site scripting vulnerability
Modified: 4/22/2025
HIGH7.0Packagist
GHSA-cgrv-6h2h-6f7v· CVE-2017-9067MODX Revolution Directory Traversal Vulnerability
Modified: 4/22/2025
MEDIUM6.1Packagist
GHSA-fpxg-5x79-43rm· CVE-2018-20756MODX Revolution allows XSS via document resources
Modified: 7/11/2025
MEDIUM6.1Packagist
GHSA-gm2g-65wj-43g8· CVE-2018-20757MODX Revolution allows XSS through extended user fields
Modified: 7/11/2025
MEDIUM5.4Packagist
GHSA-hm54-fg2w-2g6j· CVE-2025-28010MODX allows cross-site scripting (XSS) via an SVG file
Modified: 9/10/2026
HIGH7.2Packagist
GHSA-j8jp-9x42-4pj5· CVE-2022-26149Unrestricted Upload of File with Dangerous Type in MODX Revolution
Modified: 11/8/2023
HIGH7.2Packagist
GHSA-m899-6mh4-mpc5· CVE-2018-1000207MODX Revolution Incorrect Access Control vulnerability
Modified: 11/8/2023
MEDIUM4.7Packagist
GHSA-p2j4-vrgx-96qg· CVE-2017-9071MODX Revolution XSS via HTTP Host header
Modified: 4/22/2025
HIGH8.8Packagist
GHSA-phhm-6pgm-mxw9· CVE-2017-1000067MODX Revolution blind SQL injection
Modified: 4/23/2024
MEDIUM6.1Packagist
GHSA-q4c2-q63g-62j7· CVE-2018-20755MODX Revolution vulnerable to XSS attack through its User Photo field
Modified: 7/11/2025
CRITICAL9.1Packagist
GHSA-vhfp-9wvj-gwvg· BIT-modx-2020-25911, CVE-2020-25911XML External Entity vulnerability in MODX CMS
Modified: 12/6/2023
MEDIUM6.1Packagist
GHSA-vrw6-7vgj-vj7x· CVE-2017-9068MODX Revolution Reflected XSS
Modified: 4/22/2025
MEDIUM5.4Packagist
GHSA-vwqw-wfhv-2xcq· CVE-2018-20758MODX vulnerability allows for XSS via user settings parameters
Modified: 7/11/2025