CVE-2018-10033: Improper Neutralization of Input During Web Page Generation

CMS Made Simple aka CMSMS 2.2.7 has Stored XSS in admin/siteprefs.php via the metadata parameter...