CVE-2020-23205

2021-07-0121:15:07

Google

osv.dev

cross site scripting

monstra cms

web scripts

html

site settings

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

A stored cross site scripting (XSS) vulnerability in Monstra CMS version 3.0.4 allows attackers to execute arbitrary web scripts or HTML via crafted a payload entered into the “Site Name” field under the “Site Settings” module.

References

github.com/monstra-cms/monstra/issues/465