← Database

CVE-2021-36548

CRITICAL CVSS: 9.8 Published: 2021-10-28 Modified: 2026-06-17

Description

A remote code execution (RCE) vulnerability in the component /admin/index.php?id=themes&action=edit_template&filename=blog of Monstra v3.0.4 allows attackers to execute arbitrary commands via a crafted PHP file.

Affected Platforms

Monstra Monstra

Weakness Type

CWE-434

References