CVE-2018-6550: Improper Neutralization of Input During Web Page Generation

Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php...