Design/Logic Flaw

iCMS 7.0.15 allows admincp.php?app=apps XSS via the keywords parameter...