CVE-2018-6550: Monstra

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

Monstra CMS through 3.0.4 has XSS in the title function in plugins/box/pages/pages.plugin.php via a page title to admin/index.php.

Affected products

• Monstra Monstra: up to and including 3.0.4

Published 2018-02-02. Last modified 2026-06-17.