74cmsSE v3.5.1 exists to contain a reflective cross-site scripting (XSS) vulnerability via the path /index/notice/show.
74cms 74cmsse 3.5.1