An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php T_id parameter.Referenceshttps://shell01.top/2018/12/14/scms-xss/#more