CVE-2018-19324

kimsQ Rb 2.3.0 allows XSS via the second input field to the /?r=home=mypage=info URI...