Monstra CMS versions prior to 3.0.4 suffer from a cross site scripting vulnerability. Continue reading...