CVE-2010-1427 - Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch

Back Back to CVE browser

MEDIUM

Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch

Published Apr 15, 2010

4.3

MEDIUM

CVSS 2.0

EPSS 1.65%

Description

Cross-site scripting (XSS) vulnerability in the SearchHighlight plugin in MODx Evolution before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to AjaxSearch.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (6)

http://jvn.jp/en/jp/JVN46669729/index.html
third-party-advisoryx_refsource_JVNPatch
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html
third-party-advisoryx_refsource_JVNDBPatch
http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304
x_refsource_CONFIRM
http://secunia.com/advisories/39298
third-party-advisoryx_refsource_SECUNIAVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1455
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57635
vdb-entryx_refsource_XF

Link	Providers	Tags
http://jvn.jp/en/jp/JVN46669729/index.html		third-party-advisoryx_refsource_JVNPatch
http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-000013.html		third-party-advisoryx_refsource_JVNDBPatch
http://modxcms.com/forums/index.php/topic%2C47759.msg280304.html#msg280304		x_refsource_CONFIRM
http://secunia.com/advisories/39298		third-party-advisoryx_refsource_SECUNIAVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2010-1455		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/57635		vdb-entryx_refsource_XF