Jorani Leave Management System version 0.6.5 suffers from a cross site scripting vulnerability. Continue reading...