medium4.8Public exploit code
CVE-2018-10109
Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Monstra cms 3.0.4 - Persitent Cross-Site Scripting2018-04-23 · webapps · php
Impact
Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in the blog catalog.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monstra | Monstra | Version 3.0.4 |