Free CMS version 1.0a suffers from a cross site scripting vulnerability via a malicious upload. Continue reading...