CVE-2018-17024by Jeremyin Security Bulletinson Posted on September 14, 2018 admin/index.php in Monstra CMS 3.0.4 allows XSS via the page_meta_title parameter in an add_page action.