Medium severity5.4NVD Advisory· Published Mar 2, 2020· Updated Jun 17, 2026
CVE-2018-19599
CVE-2018-19599
Description
Monstra CMS 1.6 allows XSS via an uploaded SVG document to the admin/index.php?id=filesmanager&path=uploads/ URI. NOTE: this is a discontinued product.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Monstra/CMSdescription
Patches
Vulnerability mechanics
References
3- github.com/security-provensec/CVE-2018-19599/blob/master/monstra-dev_svg.pdfnvdExploitThird Party Advisory
- anh.im/image/lG1nvd
- github.com/monstra-cms/monstra/issues/467nvd
News mentions
0No linked articles in our index yet.