CVE-2018-19547: Improper Neutralization of Input During Web Page Generation

JTBCPHP 3.0.1.7 has XSS via the console/xml/manage.php?type=action&action=edit content parameter...