Description ExpressionEngine before 4.3.5 has reflected XSS. References https://docs.expressionengine.com/latest/about/changelog.html#version-4-3-5