CVE-2020-23219

Monstra CMS 3.0.4 allows attackers to execute arbitrary code via a crafted payload entered into the "Snippet content" field under the "Edit Snippet" module.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2021-07-01

Last modified

2024-08-04

Weaknesses

CWE-94

Affected products

• Monstra Cms (Monstra)

References

• https://github.com/monstra-cms/monstra/issues/466