Issues

• Add a security policy

  monstra-cms/monstra#472 · Filter by author benharvie opened on Oct 5, 2022

• Monstra 3.0.4 case without filtering leads to unrestricted file upload vulnerability

  monstra-cms/monstra#471 · Filter by author wuhuaviator opened on Sep 8, 2021

• Monstra 3.0.4 Local File Inclusion Vulnerability

  monstra-cms/monstra#469 · Filter by author Zbadblog opened on Sep 3, 2020

• PHP command execution exists in edit blog template in monstra 3.0.4

  monstra-cms/monstra#468 · Filter by author yanqian1993 opened on May 28, 2020
  1

• Cross Site Scripting Vulnerability on "Files" upload file SVG in Monstra 3.0.4

  monstra-cms/monstra#467 · Filter by author Songohan22 opened on May 25, 2020

• Bypass authentication through loose comparison (==)

  monstra-cms/monstra#462 · Filter by author peng-hui opened on May 21, 2020

• bypassed extension filter in uploading process different before

  monstra-cms/monstra#461 · Filter by author yaoyao6688 opened on Oct 11, 2019

• MONSTRA CLOSED - CHECK NEW FLEXTYPE!

  monstra-cms/monstra#460 · Filter by author Awilum opened on Nov 22, 2018
  

• Monstra 3.0.4 has Stored XSS via Uploading html file that has no extension.

  monstra-cms/monstra#459 · Filter by author Hexife opened on Oct 25, 2018
  8

• Stored XSS in Monstra CMS 3.0.4

  monstra-cms/monstra#458 · Filter by author PrincyEdward opened on Sep 12, 2018

• directory traversal in in Monstra-dev

  monstra-cms/monstra#457 · Filter by author xiaohuihui1113 opened on Aug 29, 2018
  2

• any file delete

  monstra-cms/monstra#456 · Filter by author xiaohuihui1113 opened on Aug 29, 2018

• Insecure direct object reference

  monstra-cms/monstra#453 · Filter by author dhananjay-bajaj opened on Aug 16, 2018

• XSS (Stored) in Monstra-dev

  monstra-cms/monstra#452 · Filter by author security-breachlock opened on Aug 16, 2018
  1

• XSS (via SVG file upload) in Monstra-dev

  monstra-cms/monstra#451 · Filter by author security-breachlock opened on Aug 16, 2018
  1

• Vulnerable Login Rate Limiting Bypass

  monstra-cms/monstra#447 · Filter by author abdilahrf opened on Jun 5, 2018

• XSS in registration Form

  monstra-cms/monstra#446 · Filter by author nikhil1232 opened on May 22, 2018

• Reflected XSS in Login

  monstra-cms/monstra#445 · Filter by author nikhil1232 opened on May 22, 2018

• Session Management Issue in Administrations Tab

  monstra-cms/monstra#444 · Filter by author nikhil1232 opened on May 22, 2018

• Session Management in users

  monstra-cms/monstra#443 · Filter by author nikhil1232 opened on May 22, 2018

• Found Few Bugs

  monstra-cms/monstra#442 · Filter by author nikhil1232 opened on May 22, 2018

• Monstra XSS Vulnerability @Awilum

  monstra-cms/monstra#438 · Filter by author aberkdusunur opened on May 17, 2018
  1

• 404 page have Stored XSS Vulnerability

  monstra-cms/monstra#437 · Filter by author Waterpaste opened on Apr 15, 2018

• There is a stored XSS vulnerability that can triage JavaScript code

  monstra-cms/monstra#435 · Filter by author magicming200 opened on Apr 14, 2018

• Insecure Permissions Vulnerability

  monstra-cms/monstra#434 · Filter by author sunu11 opened on Mar 28, 2018
  3