Monstra Cms vulnerabilities

• monstra cms Monstra CMS v3.0.4 contains an arbitrary file upload vulnerability in the Files Manager plugin.... CVE-2025-69906 Public exploit 8.8 HighFebruary 5, 2026
• monstra, monstra cms +1 more A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute... CVE-2024-36773 4.8 MediumJune 7, 2024
• monstra, monstra cms +1 more A cross-site scripting (XSS) vulnerability in Monstra CMS v3.0.4 allows attackers to execute... CVE-2024-36775 5.4 MediumJune 6, 2024
• monstra, monstra cms +1 more An arbitrary file upload vulnerability in Monstra CMS v3.0.4 allows attackers to execute... CVE-2024-36774 Public exploit 7.2 HighJune 6, 2024
• monstra cms An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via... CVE-2020-20691 6.5 MediumSeptember 27, 2021
• monstra cms Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php. CVE-2020-23697 5.4 MediumJuly 6, 2021
• monstra cms Monstra CMS 3.0.4 allows attackers to execute arbitrary code via a crafted payload entered into... CVE-2020-23219 8.8 HighJuly 1, 2021
• monstra cms A stored cross site scripting (XSS) vulnerability in Monstra CMS version 3.0.4 allows attackers... CVE-2020-23205 5.4 MediumJuly 1, 2021
• monstra cms ** DISPUTED ** Monstra CMS 3.0.4 allows an attacker, who already has administrative access to... CVE-2020-13978 Disputed 7.2 HighJune 9, 2020
• monstra cms Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager... CVE-2018-19599 5.4 MediumMarch 2, 2020
• monstra cms Monstra CMS before 3.0.4 has XSS via index.php. CVE-2018-11227 6.1 MediumJuly 3, 2019
• monstra cms plugins/box/users/users.plugin.php in Monstra CMS 3.0.4 allows Login Rate Limiting Bypass via... CVE-2018-11678 9.8 CriticalJune 5, 2018