S-CMS 3.0 has a cross-site scripting vulnerability, which can be exploited by attackers via the “Copyright” text box under “Basic Settings” to execute arbitrary Web scripts or HTML. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via the “Copyright” text box under “Basic Settings”.