Unrated
Zotonic before version 0.47 has mod_admin XSS.
CVE-2019-11504
First seen on SecPulse
References
- advisory docs.zotonic.com
- report packetstormsecurity.com
- report exploit-db.com