ImportExportTools NG version 10.0.4 suffers from an html injection vulnerability. Continue reading...