Hello,
I have scanned my modx-revo 2.2.4 website with a security tool, and this report "The remote web server is prone to cross-site scripting attacks."
Output:
<input type="hidden" name="nospam" value=""/>
<input type="hidden" name="thread" value="blog-post-21" />
<input type="hidden" name="parent" value="<<<<<<<<<<foo"bar'204>>>>>" />
<input type="hidden" name="auth_nonce" value="" />
<input type="hidden" name="preview_mode" value="" />
I think the problem is some code of quip component.
I use last version of apache on freebsd 8.3 server.
What I need to check for fix this?
Thank you at all
Davide
[ed. note: davinic last edited this post 14 years, 3 months ago.]
