OTCMS 3.81 allows XSS via the mode parameter in an apiRun.php?mudi=autoRun request.
- https://cisk123456.blogspot.com/2019/05/otcms-xss.html
No PoCs found on GitHub currently.