CVE-2020-24223

Mara CMS 7.5 allows contact.php?theme= XSS.