Unrated
Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php.
CVE-2018-6550
First seen on SecPulse
References
- patch github.com
- report github.com