CVE-2020-12471

Monox CMS 5.1.40.5152 and earlier versions are affected by an insecure deserialization flaw in MonoX components (ModuleGallery.HTML5Upload, ModuleGallery.SilverLightUploadModule, HTML5Upload, SilverLightUploadHandler) that enables remote code execution via HTML5Upload.ashx or Pages/SocialNetworki...

CVE-2020-12473

MonoX CMS

CVE-2020-12470

MonoX CMS: CVE-2020-12470 affects MonoX up to version 5.1.40.5152. The vulnerability allows administrators to execute arbitrary code by modifying an ASPX template. Root cause is modification of the server-side template leading to code execution with high impact (as per multiple sources in connect...

CVE-2020-12472

MonoX CMS (up to version 5.1.40.5152) contains a stored XSS in User Status, Blog Comments, and Blog Description due to insufficient validation of client-side data. Exploitation in the wild is not detailed in the provided documents; impact is client-side script execution when affected fields are v...