CVE-2014-2080

Published: Mar 1, 2014Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in manager/templates/default/header.tpl in ModX Revolution before 2.2.11 allows remote attackers to inject arbitrary web script or HTML via the "a" parameter.

Affected (26)

Products: Modx: Modx Revolution

Modx

1 product

Modx Revolution

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Modx Modx Revolution	Up to 2.2.10
Modx Modx Revolution	Version 2.0.0
Modx Modx Revolution	Version 2.0.1
Modx Modx Revolution	Version 2.0.2
Modx Modx Revolution	Version 2.0.3
Modx Modx Revolution	Version 2.0.4
Modx Modx Revolution	Version 2.0.5
Modx Modx Revolution	Version 2.0.6
Modx Modx Revolution	Version 2.0.7
Modx Modx Revolution	Version 2.0.8
Modx Modx Revolution	Version 2.1.0
Modx Modx Revolution	Version 2.1.1
Modx Modx Revolution	Version 2.1.2
Modx Modx Revolution	Version 2.1.3
Modx Modx Revolution	Version 2.1.4
Modx Modx Revolution	Version 2.1.5
Modx Modx Revolution	Version 2.2.0
Modx Modx Revolution	Version 2.2.1
Modx Modx Revolution	Version 2.2.2
Modx Modx Revolution	Version 2.2.3
Modx Modx Revolution	Version 2.2.4
Modx Modx Revolution	Version 2.2.5
Modx Modx Revolution	Version 2.2.6
Modx Modx Revolution	Version 2.2.7
Modx Modx Revolution	Version 2.2.8
Modx Modx Revolution	Version 2.2.9