Unrated
MODX Revolution v2.6.5-pl allows stored XSS via a Create New Media Source action.
CVE-2018-17556
First seen on SecPulse
References
- report github.com