Design/Logic Flaw

2018-02-0209:29:00

PRIOn knowledge base

www.prio-n.com

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.6%

Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php.

CPENameOperatorVersion
monstrale3.0.4

CPE	Name	Operator	Version
	monstra	le	3.0.4

References

github.com/monstra-cms/monstra/commit/388ab412035474068758df6b07e7e06852f3747b

github.com/monstra-cms/monstra/issues/427