system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status code.Referenceshttps://github.com/lzlzh2016/CVE/blob/master/XSS.md