Skip to content

Issues: monstra-cms/monstra

MONSTRA CLOSED - CHECK NEW FLEXTYPE!
#460 opened Nov 22, 2018 by Awilum
Open
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

95 Open 150 Closed
95 Open 150 Closed
Author
Filter by author
Label
Filter by label
Use alt + click/return to exclude labels
or ⇧ + click/return for logical OR
Projects
Filter by project
Milestones
Filter by milestone
Assignee
Filter by who’s assigned
Sort
Sort by
Newest Oldest Most commented Least commented Recently updated Least recently updated Best match
Most reactions
👍 👎 😄 🎉 😕 ❤️ 🚀 👀

Issues list

Add a security policy
#472 opened Oct 5, 2022 by benharvie
Monstra 3.0.4 case without filtering leads to unrestricted file upload vulnerability
#471 opened Sep 8, 2021 by wuhuaviator
Monstra 3.0.4 Local File Inclusion Vulnerability
#469 opened Sep 3, 2020 by Zbadblog
PHP command execution exists in edit blog template in monstra 3.0.4
#468 opened May 28, 2020 by yanqian1993
Cross Site Scripting Vulnerability on "Files" upload file SVG in Monstra 3.0.4
#467 opened May 25, 2020 by Songohan22
Bypass authentication through loose comparison (==)
#462 opened May 21, 2020 by peng-hui
bypassed extension filter in uploading process different before
#461 opened Oct 11, 2019 by yaoyao6688
MONSTRA CLOSED - CHECK NEW FLEXTYPE!
#460 opened Nov 22, 2018 by Awilum
@Awilum
Monstra 3.0.4 has Stored XSS via Uploading html file that has no extension.
#459 opened Oct 25, 2018 by Hexife
8
Stored XSS in Monstra CMS 3.0.4
#458 opened Sep 12, 2018 by PrincyEdward
directory traversal in in Monstra-dev
#457 opened Aug 29, 2018 by xiaohuihui1113
2
any file delete
#456 opened Aug 29, 2018 by xiaohuihui1113
Insecure direct object reference
#453 opened Aug 16, 2018 by dhananjay-bajaj
XSS (Stored) in Monstra-dev
#452 opened Aug 16, 2018 by security-breachlock
1
XSS (via SVG file upload) in Monstra-dev
#451 opened Aug 16, 2018 by security-breachlock
1
Vulnerable Login Rate Limiting Bypass
#447 opened Jun 5, 2018 by abdilahrf
XSS in registration Form
#446 opened May 22, 2018 by nikhil1232
Reflected XSS in Login
#445 opened May 22, 2018 by nikhil1232
Session Management Issue in Administrations Tab
#444 opened May 22, 2018 by nikhil1232
Session Management in users
#443 opened May 22, 2018 by nikhil1232
Found Few Bugs
#442 opened May 22, 2018 by nikhil1232
Monstra XSS Vulnerability @Awilum
#438 opened May 17, 2018 by aberkdusunur
1
404 page have Stored XSS Vulnerability
#437 opened Apr 15, 2018 by Waterpaste
There is a stored XSS vulnerability that can triage JavaScript code
#435 opened Apr 14, 2018 by magicming200
Insecure Permissions Vulnerability
#434 opened Mar 28, 2018 by sunu11
3
ProTip! Updated in the last three days: updated:>2024-06-02.