[MEDIUM] MODX Revolution vulnerable to XSS attack through its User Photo field

PKSA-m1g9-mnjc-hmqz CVE-2018-20755 GHSA-q4c2-q63g-62j7

Affected package: modx/revolution

Affected version: <2.7.1-pl

Reported by:
GitHub