Description Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter. References https://github.com/NucleusCMS/NucleusCMS/issues/84 https://github.com/security-breachlock/CVE-2018-16636/blob/master/nucleus_html.pdf