PT-2020-8647
CVE-2018-19599
·
تاريخ النشر
2020-03-02
·
تاريخ التحديث
2020-06-24
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Monstra CMS version 1.6
Description:
The issue allows for XSS via an uploaded SVG document to the "admin/index.php?id=filesmanager&path=uploads/" URI. It is noted that Monstra CMS is a discontinued product.
Recommendations:
For Monstra CMS version 1.6, as a temporary workaround, consider restricting access to the "admin/index.php?id=filesmanager&path=uploads/" URI to minimize the risk of exploitation. Avoid using this version until a resolution is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
قابلية الاستغلال
استغلال
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾