Description AppCMS 2.0.101 allows XSS via the upload/callback.php params parameter. References https://github.com/source-trace/appcms/issues/1