≤ 2019-12-20
FlyCms through abbaa5a allows XSS via the permission management feature.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.