CVE-2018-19918

CuppaCMS has XSS via an SVG document uploaded to the administrator//component/tablemanager/view/cuviews URI...