PT-2018-9692
CVE-2018-10118
·
تاريخ النشر
2018-04-15
·
تاريخ التحديث
2019-03-07
الوصف من
CVSS 3.1
4.8
متوسطةالمقاييسAV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Monstra CMS version 3.0.4
Description:
The issue is related to a Stored XSS in the Name field on the Create New Page screen, accessible under the "admin/index.php?id=pages" URI, and is associated with the plugins/box/pages/pages.admin.php file.
Recommendations:
For Monstra CMS version 3.0.4, update to a version that fixes the Stored XSS issue in the Name field on the Create New Page screen. As a temporary workaround, consider restricting access to the "admin/index.php?id=pages" URI to minimize the risk of exploitation. Avoid using the Name field in the Create New Page screen until the issue is resolved.
قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾