CVE-2018-16474

A stored xss in tianma-static module versions <=1.0.4 allows an attacker to execute arbitrary javascript. Date published : 2018-11-06 https://hackerone.com/reports/403692