Design/Logic Flaw

An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php Tid parameter...