Metinfo 6.1.3 has reflected XSS via the admin/column/move.php lang_columnerr4 parameter.
metinfo metinfo 6.1.3