CVE-2017-9071 | BDVDB-2026-85588 Detail

Description#

In MODX Revolution before 2.5.7, an attacker might be able to trigger XSS by injecting a payload into the HTTP Host header of a request. This is exploitable only in conjunction with other issues such as Cache Poisoning.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12017-05-18Record published in the CVE List.
2. Version 22024-09-17Most recent update recorded in the CVE List.