CVE-2024-36773
June 7, 2024, 7:24 p.m.
Tags
Product(s) Impacted
Monstra CMS
- 3.0.4
Description
A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Themes parameter at index.php.
Weaknesses
Date
Published: June 7, 2024, 3:15 p.m.
Last Modified: June 7, 2024, 7:24 p.m.
Status : Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.
More infoSource
cve@mitre.org