CVE-2013-3535

CMSLogik 1.2.0 and 1.2.1 are affected by multiple XSS vulnerabilities. The issue allows injection of arbitrary scripts via parameters in admin/settings (admin_email, header_title, site_title), admin/captcha_settings (recaptcha_private, recaptcha_public), admin/social_settings (fb_appid, fp_secret...