An issue exists in HongCMS 3.0.0. The post news feature has Stored XSS via the content field.
hongcms project hongcms 3.0.0