CVE-2020-20691

PoC —

CVSS 3.1

6.5 medium

EPSS

<1%p59

Published

Sep 27, 2021 (Sep 27, 2021)

Modified

Jun 17, 2026

Description

An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files.

Vendors: monstra
Products: monstra cms
Weakness: CWE-434
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.