Monstra code injection vulnerability

Monstra is a lightweight PHP-based content management system CMS. monstra suffers from a file inclusion vulnerability that can be exploited by remote attackers to execute arbitrary PHP code...

CVE-2018-19599

Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: this is a discontinued product...