CVE-2008-7243: Cross-site request forgery (CSRF) vulnerability in page 34 in MODx CMS 0.9.6.1 and 0.9.6.1p1 allows remote...

Security readout for executives and security teams

This CVE describes a CSRF weakness in very old MODx CMS releases. An attacker could potentially cause an already signed-in MODx manager user to submit a password-changing request without intending to. The record does not provide severity scoring, proof of active exploitation, or a confirmed fix. Exposure is most likely limited to organizations still running MODx CMS 0.9.6.1 or 0.9.6.1p1, especially where the manager interface is reachable by authenticated administrators. The source bundle provides no CPEs or broader affected product list. Prioritize this only if legacy MODx is still deployed. The business concern is account control in an administrative CMS interface, but the available evidence is incomplete and does not establish active exploitation. Mitigation focus: Identify and retire MODx 0.9.6.1 or 0.9.6.1p1 deployments.; Check MODx vendor guidance and referenced advisories for confirmed upgrade or remediation instructions.; Restrict access to the MODx manager interface to trusted administrators and networks..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.