CVE-2018-18296: Improper Neutralization of Input During Web Page Generation

MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action...