Craft CMS version 2.6 suffers from cross site scripting and remote file upload vulnerabilities. Continue reading...