CVE-2020-20691

6.5 mediumEPSS 0.9%

Medium (6.5) in monstra monstra cms. EPSS 0.9% chance of exploitation in the next 30 days.

An issue in Monstra CMS v3.0.4 allows attackers to execute arbitrary web scripts or HTML via bypassing the file extension filter and uploading crafted HTML files.

Severity

CVSS 3.1

6.5 medium

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2021-09-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

monstra:monstra_cms

References

https://github.com/monstra-cms/monstra/issues/461
https://github.com/monstra-cms/monstra/issues/461

Check your stack JSON