VYPR
Medium severity6.1OSV Advisory· Published Sep 12, 2018· Updated Jun 17, 2026

CVE-2018-16978

CVE-2018-16978

Description

Monstra CMS V3.0.4 has XSS when ones tries to register an account with a crafted password parameter to users/registration, a different vulnerability than CVE-2018-11473.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.