CVE-2019-8363: Improper Neutralization of Input During Web Page Generation

Verydows 2.0 has XSS via the index.php?c=main a parameter, as demonstrated by an a=indexXSS value...