CVE-2018-6518: Improper Neutralization of Input During Web Page Generation

Composr CMS 10.0.13 has XSS via the sitename parameter in a page=admin-setupwizard&type=step3 request to /adminzone/index.php...