MetInfo 6.1.2 has XSS via the /admin/index.php bigclass parameter in an n=column&a=doadd action.
CVE Status: Modified
No CVSS data available
Exploit-db Github