PT-2018-10592

CVE-2018-11473

·

Published

2018-05-25

·

Updated

2018-06-26

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4
Description The issue concerns a security problem where an attacker can inject malicious code. The registration form is affected, specifically the login parameter in the 'users/registration' endpoint.
Recommendations For Monstra CMS version 3.0.4, consider disabling the registration form temporarily until a fix is available to prevent potential exploitation. Restrict access to the 'users/registration' endpoint to minimize risk. Avoid using the login parameter in this endpoint until the issue is resolved.
Exploitability
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾