RockMongo is a MongoDB administration tool written in PHP. Using which you can manage your server, databases, collections, documents, indexes, and much more.
A vulnerability in RockMongo V1.1.8 allows attackers to inject arbitrary javascript into the response returned by the application that leads to cross-site scripting (XSS).