Monstra: >> Monstra Cms >> 1.6 Security Vulnerabilities
Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: this is a discontinued product.
CVSS Score
5.4
EPSS Score
0.004
Published
2020-03-02
Monstra CMS 3.0.4 and earlier has XSS via index.php.
CVSS Score
6.1
EPSS Score
0.056
Published
2019-07-03