eFront Learning CMS version 3.6.15.6 suffers from a persistent cross site scripting vulnerability in the message attachment. Continue reading...