CVE-2018-10118

This exploit demonstrates a stored XSS vulnerability in Monstra CMS < 3.0.4 by injecting malicious script into the page title field via an admin session. It automates the process of creating a page with the payload and verifies success by checking for the presence of the exploit string in the response.

This PoC exploits CVE-2018-10118, a stored XSS vulnerability in the target software. It allows an attacker to inject malicious scripts into a page via the 'page_title' parameter, which is then executed when the page is accessed.