CVE-2020-12473: Undefined Security Weakness

MonoX through 5.1.40.5152 allows admins to execute arbitrary programs by reconfiguring the Converter Executable setting from ffmpeg.exe to a different program...

CVE-2020-12470: Files or Directories Accessible to External Parties

MonoX through 5.1.40.5152 allows administrators to execute arbitrary code by modifying an ASPX template...

PT-2020-13131

Name of the Vulnerable Software and Affected Versions MonoX versions prior to 5.1.40.5152 Description The issue allows remote code execution due to deserialization in certain modules. This can be exploited via specific API endpoints, such as "HTML5Upload.ashx" or...

CVE-2020-12472: Improper Neutralization of Input During Web Page Generation

MonoX through 5.1.40.5152 allows stored XSS via User Status, Blog Comments, or Blog Description...