Cross site scripting

DhCms through 2017-09-18 has admin.php?r=admin/Index/index XSS...