CVE-2018-17025

Name of the Vulnerable Software and Affected Versions Monstra CMS version 3.0.4

Description The issue concerns an XSS exploit via the page meta title parameter in the admin/index.php file when performing an edit page action for a page without a special role.

Recommendations For Monstra CMS version 3.0.4, consider restricting access to the edit page action or validating and sanitizing the page meta title parameter to prevent XSS exploitation. As a temporary workaround, avoid using the page meta title parameter in the affected admin/index.php file until a patch is available.