MODX Revolution through v2.7.0-pl allows XSS via an extended user field such as Container name or Attribute name.Referenceshttps://github.com/modxcms/revolution/issues/14104
