PT-2020-13509

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4 Description The issue allows remote authenticated users to upload and execute arbitrary PHP code. This is possible because the system blocks .php filenames but does not block filenames with certain extensions such as...