CVE-2018-20757

MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name.

Date published : 2019-02-06

https://github.com/modxcms/revolution/issues/14104