monstra-cms monstra issues

monstra-cms / monstra

THIS PROJECT IS NOT SUPPORTED ANYMORE! Check FLEXTYPE.ORG

http://flextype.org

MIT License

398 stars 123 forks source link

issues

Newest

Newest Most commented Recently updated Oldest Least commented Least recently updated

Add a security policy

#472 benharvie opened 1 year ago
0
Monstra 3.0.4 case without filtering leads to unrestricted file upload vulnerability

#471 wuhuaviator opened 2 years ago
0
RCE (Remote Code Execution via Theme Blog Monstra version 3.0.4)

#470 r0ck3t1973 closed 2 years ago
0
Monstra 3.0.4 Local File Inclusion Vulnerability

#469 Zbadblog opened 3 years ago
0
PHP command execution exists in edit blog template in monstra 3.0.4

#468 yanqian1993 opened 4 years ago
0
Cross Site Scripting Vulnerability on "Files" upload file SVG in Monstra 3.0.4

#467 Songohan22 opened 4 years ago
0
Remote Code Execution via Snippets module in Monstra version 3.0.4

#466 r0ck3t1973 closed 4 years ago
1
Cross Site Script Vulnerability on "Site Settings" in Monstra version 3.0.4

#465 r0ck3t1973 closed 4 years ago
0
Remote Code Execution via Theme module

#464 th3lawbreaker closed 4 years ago
0
Cross Site Script Vulnerability on "Page" in Monstra version 3.0.4

#463 r0ck3t1973 closed 4 years ago
2
Bypass authentication through loose comparison (==)

#462 peng-hui opened 4 years ago
0
bypassed extension filter in uploading process different before

#461 yaoyao6688 opened 4 years ago
0
MONSTRA CLOSED - CHECK NEW FLEXTYPE!

#460 Awilum opened 5 years ago
0
Monstra 3.0.4 has Stored XSS via Uploading html file that has no extension.

#459 Hexife opened 5 years ago
8
Stored XSS in Monstra CMS 3.0.4

#458 PrincyEdward opened 5 years ago
0
directory traversal in in Monstra-dev

#457 xiaohuihui1113 opened 5 years ago
2
any file delete

#456 xiaohuihui1113 opened 5 years ago
0
php code execution in snippets modul

#455 xiaohuihui1113 closed 5 years ago
1
Cross site scripting in name field of new page

#454 dhananjay-bajaj closed 5 years ago
0
Insecure direct object reference

#453 dhananjay-bajaj opened 5 years ago
0
XSS (Stored) in Monstra-dev

#452 security-breachlock opened 5 years ago
1
XSS (via SVG file upload) in Monstra-dev

#451 security-breachlock opened 5 years ago
1
Added Privacy policy page

#450 ghost opened 5 years ago
0
Closed

#449 ghost closed 5 years ago
0
Monstra rebranded to Flextype!

#448 Awilum closed 6 years ago
12
Vulnerable Login Rate Limiting Bypass

#447 abdilahrf opened 6 years ago
0
XSS in registration Form

#446 nikhil1232 opened 6 years ago
0
Reflected XSS in Login

#445 nikhil1232 opened 6 years ago
0
Session Management Issue in Administrations Tab

#444 nikhil1232 opened 6 years ago
0
Session Management in users

#443 nikhil1232 opened 6 years ago
0
Found Few Bugs

#442 nikhil1232 opened 6 years ago
0
Monstra XSS Vulnerability @Awilum

#438 aberkdusunur opened 6 years ago
1
404 page have Stored XSS Vulnerability

#437 Waterpaste opened 6 years ago
0
Stored XSS Vulnerability(Need Authentication)

#436 starnightcyber closed 2 years ago
0
There is a stored XSS vulnerability that can triage JavaScript code

#435 magicming200 opened 6 years ago
0
Insecure Permissions Vulnerability

#434 sunu11 opened 6 years ago
3
a remote code execution vulnerability.

#433 sunu11 opened 6 years ago
2
Add GitHub documentation link

#432 budmc29 closed 6 years ago
1
MONSTRA 4 REBRANDED TO FLEXTYPE

#431 Awilum opened 6 years ago
3
Click-Jacking vulnerability

#430 Sud0-su opened 6 years ago
0
Some extension can bypassed extension filter in uploading process

#429 Hexife opened 6 years ago
1
Prevent Stored XSS Vulnerability

#428 c0d3G33k closed 6 years ago
0
Authenticated Stored Cross Site Scripting Vulnerability

#427 c0d3G33k opened 6 years ago
0
Recommended Patch for Remote Command Execution Vulnerability

#426 security-prince opened 6 years ago
1
Reporting Security Vulnerabilites

#425 security-prince opened 6 years ago
1
Monstra 3.1.0, 2017-06-08

#424 samirkherraz opened 7 years ago
0
Contact Plugin not worked

#423 ghost opened 7 years ago
1
Sparky js integration

#422 ghost opened 7 years ago
0
Check for is_string() before calling trim() on sanitizeURL()

#421 GundamDX opened 7 years ago
0
replace jquery-2.x with latest jquery-1.x to support ie8

#420 gsw945 opened 7 years ago
0