CVE-2017-9069: Modx Revolution

High severity, CVSS 8.8. EPSS: 1.9% chance of exploitation in the next 30 days.

In MODX Revolution before 2.5.7, a user with file upload permissions is able to execute arbitrary code by uploading a file with the name .htaccess.

Affected products

• Modx Modx Revolution: up to and including 2.5.6

Published 2017-05-18. Last modified 2026-06-17.