Back to Database
Status published
Medium
CVE-2018-11227
Monstra CMS 3.0.4 and earlier has XSS via index.php....
Vulnerability Description
Monstra CMS 3.0.4 and earlier has XSS via index.php.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-11227
Credits & Attribution
No credits recorded in the NVD database.
References
More from monstra
View All →CVE-2021-40940
Monstra 3.0.4 does not filter the case of php, which...
Critical
9.8
CVE-2021-36548
A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=blog...
Critical
9.8
CVE-2020-8439
Monstra CMS through 3.0.4 allows remote authenticated users to take...
Medium
6.5
CVE-2020-25414
A local file inclusion vulnerability was discovered in the captcha...
Critical
9.8
CVE-2020-23697
Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the...
Medium
5.4
Affected Vendor
monstra
View all reports →Affected Software
monstra cms
Vulnerable Versions:
0
Timeline
Official Publish:
July 3rd, 2019
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.