Unrated

Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) fir...

CVE-2018-14922 First seen on SecPulse Aug 15, 2018

Original description The description as published by the source.

Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name field in the edit profile page.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory packetstormsecurity.com
advisory indiancybersecuritysolutions.com
advisory exploit-db.com

Key facts

Severity: Unrated
Published: Aug 15, 2018
First seen on SecPulse: Aug 15, 2018

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:50