CVE-2011-0741

Published: Feb 2, 2011Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in ModX Evolution before 1.0.5 allow remote attackers to inject arbitrary web script or HTML via the (1) installer or (2) image editor.

Affected (11)

Products: Modxcms: Evolution

Modxcms

1 product

Evolution

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Modxcms Evolution	Up to 1.0.4
Modxcms Evolution	Version 0.9.0
Modxcms Evolution	Version 0.9.1
Modxcms Evolution	Version 0.9.2.1
Modxcms Evolution	Version 0.9.5
Modxcms Evolution	Version 0.9.6.1
Modxcms Evolution	Version 0.9.6.1 p1
Modxcms Evolution	Version 0.9.6.2
Modxcms Evolution	Version 0.9.6
Modxcms Evolution	Version 1.0.2
Modxcms Evolution	Version 1.0.3