Lucene search

K
osvGoogleOSV:CVE-2018-14922
HistoryAug 14, 2018 - 6:29 p.m.

CVE-2018-14922

2018-08-1418:29:00
Google
osv.dev
13

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

43.6%

Multiple cross-site scripting (XSS) vulnerabilities in Monstra CMS 3.0.4 allow remote attackers to inject arbitrary web script or HTML via the (1) first name or (2) last name field in the edit profile page.

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

43.6%