Exponent CMS version 2.3.9 suffers from a cross site scripting vulnerability that allows for user account addition. Continue reading...