Evolution CMS 1.4.x allows XSS via the page weblink title parameter to the manager/ URI.Referenceshttps://github.com/security-breachlock/CVE-2018-16637/blob/master/evolution_xss_stored.pdf