Monocms

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Monocms records in CISA KEV

No Monocms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

6 records in Monocms · all components

TI-2024-10130 CVE-2024-10928 · GHSA-fx7r-mff6-mv74

MEDIUM 57

A vulnerability was found in MonoCMS up to 20240528.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00418 Published 2024-11-06 No fix listed CWE-74

TI-2024-10129 CVE-2024-10927 · GHSA-39cp-3xcg-82ch

MEDIUM 57

A vulnerability was found in MonoCMS up to 20240528.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00444 Published 2024-11-06 No fix listed CWE-74

TI-2020-17382 CVE-2020-28672 · GHSA-pgm3-3759-c76g

MEDIUM 46

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.12144 Published 2021-01-07 No fix listed

TI-2020-15886 CVE-2020-25985 · GHSA-4q3f-rh8m-64qw

LOW 39

MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01717 Published 2020-10-07 No fix listed CWE-22

TI-2020-15888 CVE-2020-25987 · GHSA-j7hx-82r8-x847

LOW 36

MonoCMS Blog 1.0 stores hard-coded admin hashes in the log.xml file in the source files for MonoCMS Blog.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01628 Published 2020-10-06 No fix listed CWE-532

TI-2020-15887 CVE-2020-25986 · GHSA-v57g-3f5r-3789

LOW 30

A Cross Site Request Forgery (CSRF) vulnerability in MonoCMS Blog 1.0 allows attackers to change the password of a user.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00569 Published 2020-10-06 No fix listed CWE-352