Unrated
CMSUno before 1.5.3 has XSS via the title field.
CVE-2018-15567
First seen on SecPulse
References
- advisory github.com