HTML injection exists in razorCMS 3.4.8 via the /#/page keywords parameter.Referenceshttps://github.com/security-breachlock/CVE-2018-19905/blob/master/RAZOR_HTML.pdf
