admin\db\DoSql.php in EmpireCMS through 7.5 allows XSS via crafted SQL syntax to admin/admin.php.
- https://github.com/novysodope/empireCMS7.5
No PoCs found on GitHub currently.