critical9.8
CVE-2021-40940
Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.
Impact
Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monstra | Monstra | through 3.0.4 |