CVE-2018-6550

Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php...

CVE-2018-6550: Improper Neutralization of Input During Web Page Generation

Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php...

PT-2018-17629

Name of the Vulnerable Software and Affected Versions Monstra CMS versions prior to 3.0.5 Description The issue concerns a problem with the title function in the pages.plugin.php file within the plugins/box/pages directory. This problem allows for XSS attacks when a page title is sent to...