CVE-2018-10109
Summary
by MITRE
Monstra CMS 3.0.4 has a stored XSS vulnerability when an attacker has access to the editor role, and enters the payload in the content section of a new page in the blog catalog.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Analysis
by VulDB Data Team • 07/21/2025
Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xx Xxx-xxxx-xxxxx Xxxxxxxxxx X Xxxxxxxx Xxxxxx Xxxxx-xxxx Xxxxxxxxx Xxxx Xxxxxx Xxxxxxx Xxx Xxxxxxx X.x.x Xxxx Xxxxxxxxxxxx Xxxxxxx Xxxxx Xxxx Xxxxxx Xxxxxxxxxx. Xxxx Xxxxxxxx Xxxxxx Xxxxxxxxxxxxx Xxxxxxxxx Xx Xxxxxx Xxxxxxxxx Xxxxxxx Xxxx Xxx Xxxxxxx Xxxxxxxxxx Xxxxxx Xxxx Xxxxxxx Xx Xxx Xxxxxxxx Xxx Xxxxxxx Xxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxx Xx Xxxxxxxx Xx Xxxxx Xxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxx Xxxxxx Xxx Xxxx Xxxxxxx'x Xxxxxxx Xxxxxxx Xxxxx Xxxxxxx Xxx Xxxxxx Xxx Xxxxx, Xxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xx Xx Xxxxxxxxx Xxx Xxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxxxx Xxxxx Xxx Xxx Xxx Xxxxxxxxx. Xxx Xxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxx Xxxx Xxx Xxxxxxxxx Xxxxxxx Xxxxxxx Xxxxxxxx Xx Xxx Xxxxxx Xxxx Xxxxx Xxx Xxxxxxx Xxxxxx Xxxxxx Xx Xxxxxx, Xxxxxxxxxxx Xxxxxxxxx Xxxxxxxx Xxxxx Xxx Xxxx Xxx Xxxxxxxxxxx Xxxxxxx.
Xxx Xxxxxxxxx Xxxx Xxxxx Xxxx Xxxxxxxxxxxx Xxxxx Xxxxxxxxxx Xxx Xxxxxx Xxxxxxxxxxxx Xxxxxx Xxx Xxx'x Xxxxxxx Xxxxxxxx Xxxxxxxxxx. Xxxx Xxxxxxx Xxxxx Xxxxxxx Xxxx Xxx Xxxx Xxxxxxx, Xxx Xxxxxx Xxxxx Xx Xxxxxxxx Xxxxxx Xx Xxxxxx Xxxxxxx Xxxxxxxxxx Xxxx Xxxxx Xx Xxxxxxxxxxx Xx Xxxx Xx Xxxxxxxxxx Xxxx. Xxxx Xxxx Xx Xxxxxx Xxxxxxxxxxxx Xxxxxxx Xx Xxxxxxxxxxx Xxxxx Xxxxxxxxx Xxx Xxxxxx Xxxxxxxxx Xxxxxxx Xxxx Xxxxxxx Xx Xxx Xxxxxxx Xx Xxxxx Xxxxx' Xxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxxxxx Xxxxxxx Xxx Xxxxxxx Xxxxxxx Xx Xxx Xxxxx, Xxxxxxxxxx Xxxx Xxx Xxxxxxxxxxxx Xxxxxxx Xx Xxxxxxxx Xxxxxx Xxx Xxxx Xxxxxxxx Xxxxxxxx. Xxxxxxxxx Xx Xxx Xxxxxxxxxxxxxx, Xxxx Xxxxxxxxxx X Xxx-xx: Xxxxxxxx Xxxxxxxxxxxxxx Xx Xxxxx Xxxxxx Xxx Xxxx Xxxxxxxxxx, Xxxxx Xx X Xxxxxxxxxxx Xxxxxxxx Xx Xxx Xxxxxxxxxxx Xxxxxxxx. Xxx Xxxxxx Xxxxxx Xxxxxxxx Xx Xxxxxxxx Xx Xxxxxxx Xxxxxxx Xx Xxxxxx Xxxx, Xxx Xxxx Xxxxxxxxx Xxxxxxxxxx Xxxx Xxx Xx Xxxxxxxx Xxxxxxx Xxxxxxx Xxxxx Xxxxxxxxx Xxxxxxxxxx Xxxxx, Xxxxxx Xxxxxxxxxxx, Xx Xxxxxxxxxxxx Xx Xxxxx Xxxxxxxxxxxxxxx Xx Xxx Xxxxxx.
Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxx Xxxxxxxxxxxxx Xxxxxxx Xxxxxx Xxxxxx Xxxxxx Xxxxxxxxx, Xx Xx Xxx Xxxxxx Xxxxxxxxx Xx Xxxxxxx X Xxxx Xxxxx Xx Xxxxxxxxx Xxxxxxxxxx Xxxxxxxxx Xxxxxxx Xxxxxxxxx, Xxxx Xxxxx, Xxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxx. Xxxx Xx Xxxxxxxx Xxxxxxxxxxxx Xxxxxxx X Xxxxxxx, Xxxx Xxx Xxxxx Xxxx Xxxxxxx, Xxxxx Xxxxx Xxxxx Xxxx Xx Xxxxxxxxxxx Xxxxxxxxxx Xxxxx Xxx Xxxxxxxxxxx Xxxx Xxxxxxxxxxxxxx Xxxxxxxxxx. Xxx Xxxxxxxxxx Xxxxxx Xx Xxxxxx Xxx Xxxxx Xxxx Xxx Xxxxxx Xxx Xxxxxxxx Xx Xxxxxx Xxxxx Xxxx Xxxxx Xxx Xxxxxxx Xxxxxxxxxx, Xxxxxx Xx Xxxxxxxxxxxx Xxxxxxxxx Xxx Xxxxxxx Xxxxxxxxxx Xxxxxxx Xxxxx Xxxxxxx Xxxxxxxxx Xxxxxx Xxxxxxx. Xxxx Xxxxxxxxxxxxx Xxxxxxxx Xxxx Xx Xxxxxxx Xxx&xx Xxxxxxxxxx Xxxxxxxxx Xxxxx.xxx Xxx Xxxxxxxxx Xxx Xxxxx Xxx Xxxxxxxxxx Xxxxxx, Xx Xxxxxxxxx Xxx Xxxxxxxx Xxx Xxxxxxxxxxx Xxxxxx Xx Xxxxxxx Xxxxxxxxx Xxxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxxxxx. Xxx Xxxxxx Xx Xxxxxxxxxxxx Xxxxxx Xx Xxxxxxxxxxxx Xxxxx Xxxxxxxx Xxxxxxx Xxxx Xxxxxx Xx Xxx Xxxxxx, Xx Xxx Xxxxxx Xxxxxxx Xxxxxxx Xxxxxxxxxxxxx Xxxx Xxxx Xxxxxxxxxx Xxxx.
Xxxxxxxxxx Xxxxxxxxxx Xxx Xxx-xxxx-xxxxx Xxxxxx Xxxxx Xx Xxxxxxxxx Xxxxxxxx Xx Xxx Xxxxxxx Xxx Xx Xxxxxxx X.x.x Xx Xxxxx, Xxxxx Xxxxxxxx Xxx Xxxxxxxxx Xxxxxxxx Xxxxx. Xxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxxx Xxxxxx Xxxxx Xxxxxxxxxx Xx Xxxxxxxx Xxxxxx Xxxxxxxxx Xxxxxx-xxxx Xxx Xxxxxx-xxxx Xxxxxxxxxxxx, Xxxx Xxxxxxxxxx Xxxxxxxxx Xx Xxx Xxxxxxx Xxxxxxxx Xxxxxxxxxx Xx Xxx Xxxx Xxxxxxx. Xxx Xxxxxxxxx Xx Xxxxx Xxxxxxxxx Xxxxxx Xx Xxxxxxxx Xx Xxxxxxxx Xxxxxx Xxxxxxxxxxx Xx Xxxx Xxxxxxxxx Xxxxxxxxx Xxx Xxxxxxxxxxxx Xxxx-xxxxx Xxxxxx Xxxxxxxx Xxxx Xxxxxxxx Xxx Xxxxxxxxx Xxxxxx Xx Xxxxxxxxxxx Xxxxxxxx. Xxxxxxxxxx Xxxxxxxxx Xxxxxxxx Xxxxxxx Xxxxxxxxxxxx Xxxxxxx Xxxxxxxx Xxxxxxxx Xx Xxxxxxx Xxxxxxxxx Xx Xxxxxxxxxxxx Xxxxxxx, Xxxxxxx Xxxxxxxx Xxxxxxxx Xx Xxxx Xxxxxx, Xxx Xxxxxxxxxx Xxx Xxxxxxxxxx Xxxxxxx Xxxxxxxxxxx. Xxxxxxxxxxxxx Xxxxxx Xxxx Xxxxxxxx Xxxxxxxxxxxx Xxx Xxxxxxxxxxx Xxxxxxxxx Xx Xxxxxx Xxx Xxxxx Xxxxx Xxx Xxxxxx Xxxxxxxx, Xxx Xxxxxxxxx Xxxxxxxx Xxxxxxxx Xxxxxxxxxx Xxx Xxxxx Xxxxxxxxx Xxx Xxxxxxxxxxx Xx Xxxxxxx Xxxxxxxxxxxxxxx. Xxx Xxxxxxxxxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxxxx Xx Xxxxxx Xxxxx Xxxxxxxxxxxx Xxx Xxxxxx Xxxxxxxx Xx Xxx Xxxxxxxxxxxx, Xxxxxxxx Xxxx Xxxxx Xxx Xx Xxxxxxxxxxxxxxx Xxx Xxxxxxxxxx Xxxxx-xxxx Xxxxxxxxx Xxxxxxx Xxxxxxx Xxxxxx Xxxxxxxxxx Xxx Xxxxxxxx Xx Xxxx-xxxxxxxx Xxxx.