BIGACE version 2.7.8 suffers from cross site scripting and file upload vulnerabilities. Continue reading...