Cross site scripting

An issue was discovered in QCMS 3.0.1. upload/System/Controller/backend/news.php has XSS...