Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')