medium6.1
CVE-2018-17025
admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an edit_page action for a page with no special role.
Impact
admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an edit_page action for a page with no special role.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Monstra | Monstra | Version 3.0.4 |