TuziCMS 2.0.6 has XSS via the PATH_INFO to a group URI, as demonstrated by index.php/article/group/id/2/.Referenceshttps://github.com/yeyinshi/tuzicms/issues/5
