CVE-2020-25414

2021-06-1715:15:07

Google

osv.dev

vulnerability

monstra

remote attackers

php code

captcha function

AI Score

7.6

Confidence

High

EPSS

0.01

Percentile

83.6%

JSON

A local file inclusion vulnerability was discovered in the captcha function in Monstra 3.0.4 which allows remote attackers to execute arbitrary PHP code.

References

github.com/monstra-cms/monstra/issues/469