CVE-2018-11473

Monstra CMS 3.0.4 has XSS in the registration Form (i.e., the login parameter to users/registration).

• CWE-79

• https://github.com/monstra-cms/monstra/issues/446Third Party Advisory
• https://github.com/nikhil1232/Monstra-CMS-3.0.4-XSS-ON-Registration-PageThird Party Advisory
• https://github.com/monstra-cms/monstra/issues/446Third Party Advisory
• https://github.com/nikhil1232/Monstra-CMS-3.0.4-XSS-ON-Registration-PageThird Party Advisory

Published

May 25, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11468The __mkd_trim_line function in mkdio.c in libmarkdown.a in …
• CVE-2018-11469Incorrect caching of responses to requests including an Auth…
• CVE-2018-1147In Nessus before 7.1.0, a XSS vulnerability exists due to im…
• CVE-2018-11470iScripts eSwap v2.4 has SQL injection via the "search.php" '…
• CVE-2018-11471Cockpit 0.5.5 has XSS via a collection, form, or region.
• CVE-2018-11472Monstra CMS 3.0.4 has Reflected XSS during Login (i.e., the …
• CVE-2018-11474Monstra CMS 3.0.4 has a Session Management Issue in the Admi…
• CVE-2018-11475Monstra CMS 3.0.4 has a Session Management Issue in the User…
• CVE-2018-11476An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle de…
• CVE-2018-11477An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle de…
• CVE-2018-11478An issue was discovered on Vgate iCar 2 Wi-Fi OBD2 Dongle de…
• CVE-2018-11479The VPN component in Windscribe 1.81 uses the OpenVPN client…