CVE-2018-10109

Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in…

published April 14, 2018

CVSS
—
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in the blog catalog.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02076 · 81.2th percentile
Published
2018-04-14T13:00Z
EPSS history
Timeline
  • 14 APR 13:00Z
    Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in…
    cvelistv5