PHP-Nuke 7.4 has a cross site scripting flaw that allows an attacker the ability to post global homepage messages.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/34278/codelabs-04.txt
Source: https://packetstormsecurity.com/files/34278/CODEBUG-Labs-Security-Advisory-4.html