https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T21:40:52.085523+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-223578 EUVD-2026-223578 2026-10-05T21:40:52.133861+00:00 EUVD-2026-223578 https://cve.radiocsirt.org/vuln/fkie_cve-2025-28010 fkie_cve-2025-28010 2026-10-05T21:40:52.133900+00:00

A cross-site scripting (XSS) vulnerability has been identified in MODX prior to 3.1.0. The vulnerability allows authenticated users to upload SVG files containing malicious JavaScript code as profile images, which gets executed in victims' browsers when viewing the profile image.

 https://cve.radiocsirt.org/vuln/ghsa-hm54-fg2w-2g6j GHSA-hm54-fg2w-2g6j — MODX allows cross-site scripting (XSS) via an SVG file 2026-10-05T21:40:52.133935+00:00

Affected: Packagist: modx/revolution

A cross-site scripting (XSS) vulnerability has been identified in MODX prior to 3.1.0. The vulnerability allows authenticated users to upload SVG files containing malicious JavaScript code as profile images, which gets executed in victims' browsers when viewing the profile image.