Cross site scripting

A reflected Cross-site Scripting XSS vulnerability exists in OcPortal 9.0.20 via the OCFEMOTICONCELL.tpl FIELDNAME field to data/emoticons.php...