CVE-2018-11472

2018-05-2519:29:00

Google

osv.dev

0.001 Low

EPSS

Percentile

29.7%

JSON

Monstra CMS 3.0.4 has Reflected XSS during Login (i.e., the login parameter to admin/index.php).

CPENameOperatorVersion
monstraeq2.2.0
monstraeq3.0.2
monstraeq2.3.1
monstraeq2.3.0
monstraeq3.0.4
monstraeq3.0.0
monstraeq3.0.3
monstraeq2.2.1
monstraeq3.0.1

Name	Operator	Version
monstra	eq	2.2.0
monstra	eq	3.0.2
monstra	eq	2.3.1
monstra	eq	2.3.0
monstra	eq	3.0.4
monstra	eq	3.0.0
monstra	eq	3.0.3
monstra	eq	2.2.1
monstra	eq	3.0.1

References

github.com/monstra-cms/monstra/issues/445

github.com/nikhil1232/Monstra-CMS-3.0.4-Reflected-XSS-On-Login-

0.001 Low

EPSS

Percentile

29.7%

JSON

Related for OSV:CVE-2018-11472