COVO versions 9.0.8, 10.0.11, and 12.0.4 suffer from a cross site scripting vulnerability. Continue reading...