FlyCms through abbaa5a allows XSS via the permission management feature.
- https://github.com/Ghostfox2003/cms/blob/main/1.md
- https://github.com/fkie-cad/nvd-json-data-feeds