CVE-2017-8052by Jeremyin Security Bulletinson Posted on April 22, 2017 Craft CMS before 2.6.2974 allows XSS attacks.