CVE-2018-14922

Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) first name…

published August 14, 2018

CVSS
—
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name field in the edit profile page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01952 · 80.1th percentile
Published
2018-08-14T16:00Z
EPSS history
Timeline
  • 14 AUG 16:00Z
    Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) first name…
    cvelistv5