Description blog/index.php in SansCMS 0.7 has XSS via the q parameter. References https://github.com/thm/SansCMS/issues/7