system\errors\404.php in HongCMS 3.0.0 has XSS via crafted input that triggers a 404 HTTP status code.
- https://github.com/lzlzh2016/CVE/blob/master/XSS.md
No PoCs found on GitHub currently.