Exponent CMS version 2.3.5 suffers from a file upload vulnerability that allows for cross site scripting. Continue reading...