Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A cross-site scripting (XSS) vulnerability has been identified in MODX prior to 3.1.0. The vulnerability allows authenticated users to upload SVG files containing malicious JavaScript code as profile images, which gets executed in victims' browsers when viewing the profile image.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MODX Revolution 安全漏洞
Vulnerability Description
MODX Revolution是美国MODX公司的一套基于PHP的开源内容管理系统（CMS）。该系统支持在线协作、搜索引擎优化（SEO）等。 MODX Revolution 3.1.0之前版本存在安全漏洞，该漏洞源于经过身份验证的用户可以上传包含恶意JavaScript代码的SVG文件作为个人资料图片，当查看个人资料图片时会在受害者浏览器中执行。
CVSS Information
N/A
Vulnerability Type
N/A