CVE-2018-16978

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4

Description The issue occurs when an individual attempts to register an account with a crafted password parameter to the "users/registration" endpoint. This is a distinct issue from previously identified vulnerabilities.

Recommendations For Monstra CMS version 3.0.4, consider restricting access to the "users/registration" endpoint until a fix is available, and avoid using crafted password parameters to prevent potential exploitation.