MonoX CMS

According to its website, MonoX CMS is an easy to use CMS and Social Networking Platform for ASP.NET, built on top of the Web Parts framework. Its responsive user interface is compatible with modern Web browsers, allowing for intuitive, drag-and drop interaction with the portal parts. In addition to the 50 built-in Web parts, it supports localization, personalization, cloud data storage, SEO and many more advanced features.

During an independent assessment of version 5.1.40.5148, multiple vulnerabilities were found to affect this product.

Table of contents

• CVE-2020-12472 - Multiple Cross-Site-Scripting
• CVE-2020-12473 - Remote Command Execution via Convert Video
• CVE-2020-12470 - Remote Command Execution via Template Tampering
• CVE-2020-12471 - RCE via Insecure Deserialization