Modx
1 CVEs
product
Monthly
A cross-site scripting (XSS) vulnerability has been identified in MODX prior to 3.1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
XSS
Modx
NVD
GitHub
CVSS 3.1
5.4
EPSS
0.1%
CVE-2025-28010
PHP
EPSS 0%
CVSS 5.4
MEDIUM
POC
This Month
A cross-site scripting (XSS) vulnerability has been identified in MODX prior to 3.1.0. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
XSS
Modx
NVD
GitHub