CVE-2017-1000223

A stored web content injection vulnerability (WCI, a.k.a XSS) is present in MODX Revolution CMS version 2.5.6 and earlier. An authenticated user with permissions to edit users can save malicious JavaScript as a User Group name and potentially take control over victims' accounts. This can lead to an escalation of privileges providing complete administrative control over the CMS.

• CWE-79

• https://raw.githubusercontent.com/modxcms/revolution/v2.5.7-pl/core/docs/changelog.txtRelease Notes, Third Party Advisory
• https://raw.githubusercontent.com/modxcms/revolution/v2.5.7-pl/core/docs/changelog.txtRelease Notes, Third Party Advisory

Published

Nov 17, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-1000217Opencast 2.3.2 and older versions are vulnerable to script i…
• CVE-2017-1000218LightFTP version 1.1 is vulnerable to a buffer overflow in t…
• CVE-2017-1000219npm/KyleRoss windows-cpu all versions vulnerable to command …
• CVE-2017-1000220soyuka/pidusage <=1.1.4 is vulnerable to command injection i…
• CVE-2017-1000221In Opencast 2.2.3 and older if user names overlap, the Openc…
• CVE-2017-1000222Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2017-1000224CSRF in YouTube (WordPress plugin) could allow unauthenticat…
• CVE-2017-1000225Reflected XSS in Relevanssi Premium version 1.14.8 when usin…
• CVE-2017-1000226Stop User Enumeration 1.3.8 allows user enumeration via the …
• CVE-2017-1000227Stored XSS in Salutation Responsive WordPress + BuddyPress T…
• CVE-2017-1000228nodejs ejs versions older than 2.5.3 is vulnerable to remote…
• CVE-2017-1000229Integer overflow bug in function minitiff_read_info() of opt…