A cross-site scripting (XSS) vulnerability in Monstra CMS...
Moderate severity
Unreviewed
Published
Jun 7, 2024
to the GitHub Advisory Database
•
Updated Aug 2, 2024
Description
Published by the National Vulnerability Database
Jun 7, 2024
Published to the GitHub Advisory Database
Jun 7, 2024
Last updated
Aug 2, 2024
A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Themes parameter at index.php.
References