ilchCMS 2.1.23 allows XSS via the index.php/partner/index Banner parameter.
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2019-20524.json"