CVE

Id
69375  
CVE No.
CVE-2014-2080  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter.  
Phase
Assigned (20140219)  
Votes
None (candidate not yet proposed)  
Comments