DBHcms v1.2.0 has a stored XSS vulnerability as there is no htmlspecialchars function for '$_POST'pageparam_insert_description'' variable in dbhcms\\mod\\mod.page.edit.php line 227 A remote authenticated with admin user can exploit this vulnerability to hijack other users.