WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address field under the background links module.Referenceshttps://github.com/taosir/wtcms/issues/11