The BouquetEditor plugin for Dreambox 2.0.0 suffers from a cross site scripting vulnerability. Continue reading...