CVE-2018-19464: Improper Neutralization of Input During Web Page Generation

Discuz! X3.4 allows XSS via admin.php because admincp/admincpsetting.php and template\default\common\footer.htm mishandles statcode field from third-party stats code...