Insufficient filtering of the tag parameters in feehicms 0.1.3 allows attackers to execute arbitrary web or HTML via a crafted payload.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-19709.json"