Ivan Cordoba Generic Content Management System (CMS) through 2018-04-28 has XSS via the Administrator/add_pictures.php article ID.
- https://github.com/nabby27/CMS/pull/3
No PoCs found on GitHub currently.