Lucene search

K
osvGoogleOSV:CVE-2018-18694
HistoryOct 29, 2018 - 12:29 p.m.

CVE-2018-18694

2018-10-2912:29:04
Google
osv.dev
8

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

27.8%

admin/index.php?id=filesmanager in Monstra CMS 3.0.4 allows remote authenticated administrators to trigger stored XSS via JavaScript content in a file whose name lacks an extension. Such a file is interpreted as text/html in certain cases.

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

27.8%

Related for OSV:CVE-2018-18694