admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an edit_page&name=error404 action, a different vulnerability than CVE-2018-10121.
References
Link | Resource |
---|---|
https://github.com/bg5sbk/MiniCMS/issues/25 | Exploit Third Party Advisory |
Configurations
Information
Published : 2018-09-13 13:29
Updated : 2018-10-30 12:38
NVD link : CVE-2018-17026
Mitre link : CVE-2018-17026
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Products Affected
monstra
- monstra