CVE-2018-16726

razorCMS 3.4.7 allows HTML injection via the description of the homepage within the settings component.

Source: CVE-2018-16726