User with Orion Platform Admin Rights could store XSS through URL POST parameter in CreateExternalWebsite website.
No PoCs from references.
- https://github.com/ARPSyndicate/cvemon
- https://github.com/kaje11/CVEs