Beveiligingsadvies

CVE-2025-28010

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-03-13 00:00:00

Laatst bijgewerkt 2025-03-19 14:53:43

Toegewezen door mitre

CVSS-score 5.4

Status PUBLISHED

Beschrijving

A cross-site scripting (XSS) vulnerability has been identified in MODX prior to 3.1.0. The vulnerability allows authenticated users to upload SVG files containing malicious JavaScript code as profile images, which gets executed in victims' browsers when viewing the profile image.

← Alle CVE's bekijken Bekijk op cve.org ↗