CVE-2018-10118
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 2.9%
from disclosure to weapon53 days
Published on NVDApr 15
1st PoC+53d
exploitation probability
2.9%top 15% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
Monstra CMS 3.0.4 has Stored XSS via the Name field on the Create New Page screen under the admin/index.php?id=pages URI, related to plugins/box/pages/pages.admin.php.
Affected products
n/a · n/apublic PoCs found — 3
githubgithub.com/GeunSam2/CVE-2018-10118★ 1cve_referencewww.exploit-db.com/exploits/44855/unverifiedexploitdbwww.exploit-db.com/exploits/44855unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.