CVE-2018-12919

In CraftedWeb through 2013-09-24, aasp_includes/pages/notice.php allows XSS via the e parameter.

Source: CVE-2018-12919