CVE-2017-1000067: Modx Revolution

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

MODX Revolution version 2.x - 2.5.6 is vulnerable to blind SQL injection caused by improper sanitization by the escape method resulting in authenticated user accessing database and possibly escalating privileges.

Affected products

• Modx Revolution: version 2.0.0 only; version 2.0.1 only; version 2.1.0 only; version 2.1.1 only; version 2.1.2 only; version 2.1.3 only; …

Published 2017-07-17. Last modified 2026-06-17.