[MEDIUM] MODX Revolution allows XSS through extended user fields

PKSA-51tt-xjsn-s945 CVE-2018-20757 GHSA-gm2g-65wj-43g8

Affected package: modx/revolution

Affected version: <2.7.1-pl

Reported by:
GitHub