CVE-2020-23205

2021-07-0120:09:10

mitre

www.cve.org

monstra cms

cross site scripting

arbitrary web scripts

AI Score

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

A stored cross site scripting (XSS) vulnerability in Monstra CMS version 3.0.4 allows attackers to execute arbitrary web scripts or HTML via crafted a payload entered into the “Site Name” field under the “Site Settings” module.

References

github.com/monstra-cms/monstra/issues/465