CVE-2018-16730

\upload\plugins\sys\Install.php in CScms 4.1 has XSS via the site name...