Monstra CMS 3.0.4 has XSS in the registration Form (i.e., the login parameter to users/registration).