CVE-2018-11227

2019-07-0316:15:09

Google

osv.dev

5.8 Medium

AI Score

Confidence

High

0.019 Low

EPSS

Percentile

88.7%

Monstra CMS 3.0.4 and earlier has XSS via index.php.

CPENameOperatorVersion
monstraeq3.0.2
monstraeq2.2.0
monstraeq3.0.1
monstraeq2.3.0
monstraeq3.0.3
monstraeq2.2.1
monstraeq2.3.1
monstraeq3.0.0

Name	Operator	Version
monstra	eq	3.0.2
monstra	eq	2.2.0
monstra	eq	3.0.1
monstra	eq	2.3.0
monstra	eq	3.0.3
monstra	eq	2.2.1
monstra	eq	2.3.1
monstra	eq	3.0.0

References

github.com/monstra-cms/monstra/issues

github.com/monstra-cms/monstra/issues/438

www.exploit-db.com/exploits/44646