Media CP Media Control Panel latest version. Reflected XSS possible through unspecified endpoint.
CWE-79, CWE-79