CVE-2018-6550

CVE-2018-6550 affects Monstra CMS up to version 3.0.4, where an XSS flaw exists in the title handling of plugins/box/pages/pages.plugin.php that can be triggered via a crafted page title sent to admin/index.php. Public sources consistently describe an XSS in the title function, with potential imp...