Vulnerability Database

296,336

Total vulnerabilities in the database

CVE-2008-5942

Multiple cross-site scripting (XSS) vulnerabilities in MODx before 0.9.6.3 allow remote attackers to inject arbitrary web script or HTML via vectors related to (1) the preserveUrls function and (2) "username input." NOTE: vector 2 may be related to CVE-2008-5939.

Published: Jan 22, 2009
Updated: Apr 13, 2023
CVE: CVE-2008-5942
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 4.3
AV:N/AC:M/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
modxcms / modxcms	0.9.2.1	0.9.2.1.x
modxcms / modxcms	0.9.0	0.9.0.x
modxcms / modxcms	0.9.6	0.9.6.x
modxcms / modxcms	0.9.1	0.9.1.x
modxcms / modxcms	-	0.9.6.2.x
modxcms / modxcms	0.9.6.1	0.9.6.1.x
modxcms / modxcms	0.9.5	0.9.5.x