DotNetNuke versions 7.2.8 and below suffers from a cross site scripting vulnerability in CATALooKStore. Continue reading...