Monstra Cms Security Vulnerabilities and Issues — Monstra Cms CVE List

Lucene search

MonstraMonstra Cms

3 matches found

CVE•added 2024/06/07 3:15 p.m.•76 views

CVE-2024-36773

A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Themes parameter at index.php.

4.8CVSS5.6AI score0.00052EPSS

CVE•added 2024/06/06 10:15 p.m.•75 views

CVE-2024-36774

An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary code via uploading a crafted PHP file.

8CVSS8.1AI score0.00031EPSS

CVE•added 2024/06/06 10:15 p.m.•68 views

CVE-2024-36775

A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the About Me parameter in the Edit Profile page.

5.4CVSS5.9AI score0.00076EPSS