Vulnerabilities

TI-2024-10130 CVE-2024-10928 · GHSA-fx7r-mff6-mv74

MonoCMS Posts Page opensaved.php cross site scripting

MEDIUM 57

A vulnerability was found in MonoCMS up to 20240528.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00418 Published 2024-11-06 No fix listed CWE-74

TI-2024-10129 CVE-2024-10927 · GHSA-39cp-3xcg-82ch

MEDIUM 57

A vulnerability was found in MonoCMS up to 20240528.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00444 Published 2024-11-06 No fix listed CWE-74

TI-2020-17382 CVE-2020-28672 · GHSA-pgm3-3759-c76g

MEDIUM 46

MonoCMS Blog 1.0 is affected by incorrect access control that can lead to remote arbitrary code execution.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.12144 Published 2021-01-07 No fix listed

TI-2020-15886 CVE-2020-25985 · GHSA-4q3f-rh8m-64qw

LOW 39

MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01717 Published 2020-10-07 No fix listed CWE-22

TI-2020-15887 CVE-2020-25986 · GHSA-v57g-3f5r-3789

LOW 30

A Cross Site Request Forgery (CSRF) vulnerability in MonoCMS Blog 1.0 allows attackers to change the password of a user.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00569 Published 2020-10-06 No fix listed CWE-352

TI-2020-15888 CVE-2020-25987 · GHSA-j7hx-82r8-x847

LOW 36

MonoCMS Blog 1.0 stores hard-coded admin hashes in the log.xml file in the source files for MonoCMS Blog.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01628 Published 2020-10-06 No fix listed CWE-532