Security RockMongo 1.1.8 Cross Site Request Forgery / Cross Site Scripting April 12, 2016 007admin Leave a comment RockMongo version 1.1.8 suffers from cross site request forgery, cross site scripting, and html injection vulnerabilities.