EDB-44502
PoCMonstra cms 3.0.4 - Persitent Cross-Site Scripting
view exploit source exploit_dbtype webappsauthor Wenming Jiangpublished 2018-04-23catalog exploit_db
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-10109US | medium4.8 | Exploit | ||
Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in the blog catalog. | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan