CVE-2017-8298: Improper Neutralization of Input During Web Page Generation

cnvs.io Canvas 3.3.0 has XSS in the title and content fields of a "Posts Add New" action, and during creation of new tags and users...