FLAT-1A69R (CVE-2025-28010)
Server side cross-site scripting In modx/revolution
1.2
Low
Ecosystem: Packagist
Package: modx/revolution
FLAT-82Z51 (CVE-2017-9068)
Reflected cross-site scripting (XSS) In modx/revolution
1.2
Low
Ecosystem: Packagist
Package: modx/revolution
FLAT-JPGFW (CVE-2017-9071)
Reflected cross-site scripting (XSS) In modx/revolution
0.6
Low
Ecosystem: Packagist
Package: modx/revolution
FLAT-QM9FQ (CVE-2017-9069)
Insecure file upload In modx/revolution
6.3
Medium
Ecosystem: Packagist
Package: modx/revolution
FLAT-SHIOD (CVE-2017-9070)
Server side cross-site scripting In modx/revolution
1.2
Low
Ecosystem: Packagist
Package: modx/revolution
FLAT-KKQ9C (CVE-2017-9067)
Lack of data validation - Path Traversal In modx/revolution
4.4
Medium
Ecosystem: Packagist
Package: modx/revolution
FLAT-BNBY0 (CVE-2017-1000067)
NoSQL injection In modx/revolution
6.3
Medium
Ecosystem: Packagist
Package: modx/revolution
FLAT-B3045 (CVE-2018-20757)
Server side cross-site scripting In modx/revolution
1.3
Low
Ecosystem: Packagist
Package: modx/revolution
FLAT-YVVZ1 (CVE-2018-20755)
Server side cross-site scripting In modx/revolution
1.3
Low
Ecosystem: Packagist
Package: modx/revolution
FLAT-AYRAE (CVE-2018-20756)
Server side cross-site scripting In modx/revolution
1.3
Low
Ecosystem: Packagist
Package: modx/revolution
FLAT-QSR93 (CVE-2018-1000207)
Improper authorization control for web services In modx/revolution
6.1
Medium
Ecosystem: Packagist
Package: modx/revolution
FLAT-5EAO6 (CVE-2018-20758)
Server side cross-site scripting In modx/revolution
1.2
Low
Ecosystem: Packagist
Package: modx/revolution
FLAT-JI06W (CVE-2022-26149)
Insecure file upload In modx/revolution
6.1
Medium
Ecosystem: Packagist
Package: modx/revolution
FLAT-WBJLS (CVE-2020-25911)
XML injection (XXE) In modx/revolution
2.4
Low
Ecosystem: Packagist
Package: modx/revolution