CVE-2018-20601

UCMS 1.4.7 has XSS via the description parameter in an index.php listeditpost action...