12 matches found
EUVD-2018-8809
Malware in sbrugna...
CVE-2018-17025
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an editpage action for a page with no special role...
CVE-2018-17026
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an editpage=error404 action, a different vulnerability than CVE-2018-10121...
CVE-2018-17025
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an editpage action for a page with no special role...
Design/Logic Flaw
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an editpage action for a page with no special role...
CVE-2018-17025
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an editpage action for a page with no special role...
CVE-2018-17026
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an editpage&name=error404 action, a different vulnerability than CVE-2018-10121...
CVE-2018-17024
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an addpage action...
CVE-2018-17025
CVE-2018-17025 affects Monstra CMS 3.0.4. The issue is an XSS in admin/index.php via the page_meta_title parameter in an edit_page action for pages with no special role. Documented impact is XSS; no exploitation details are provided in the sources. CVSS scores listed: CVSS v2 base 4.3 (Medium) an...
CVE-2018-17026
CVE-2018-17026 concerns Monstra CMS 3.0.4, where several sources describe a cross-site scripting vulnerability in admin/index.php via the page_meta_title parameter within the edit_page&name=error404 flow. Red Hat’s entry (RH:CVE-2018-17026) specifies a stored XSS vulnerability when an editor with...
CVE-2018-17025
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an editpage action for a page with no special role...
CVE-2018-17024
admin/index.php in Monstra CMS 3.0.4 allows XSS via the pagemetatitle parameter in an addpage action...