MiniCMS 1.10, when Internet Explorer is used, allows XSS via a crafted URI because $_SERVER['REQUEST_URI'] is mishandled.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV