CVE-2021-40940

Monstra 3.0.4 does not filter the case of php, which leads to an unrestricted file upload vulnerability.

Date published : 2022-06-15

https://github.com/monstra-cms/monstra/issues/471