medium6.5
CVE-2020-20691
An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML fil…
Impact
An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monstra | Monstra Cms | Version 3.0.4 |