CVE-2018-10118

Name of the Vulnerable Software and Affected Versions: Monstra CMS version 3.0.4

Description: The issue is related to a Stored XSS in the Name field on the Create New Page screen, accessible under the "admin/index.php?id=pages" URI, and is associated with the plugins/box/pages/pages.admin.php file.

Recommendations: For Monstra CMS version 3.0.4, update to a version that fixes the Stored XSS issue in the Name field on the Create New Page screen. As a temporary workaround, consider restricting access to the "admin/index.php?id=pages" URI to minimize the risk of exploitation. Avoid using the Name field in the Create New Page screen until the issue is resolved.