index.php in Ovidentia 8.4.3 has XSS via tg=groups tg=maildoms&idx=create&userid=0&bgrp=y tg=delegat tg=site&idx=create tg=site&item=4 tg=admdir&idx=mdb&id=1 tg=notes&idx=Create tg=admfaqs&idx=Add or tg=admoc&idx=addoc&item=.