PHPHolidays CMS version 3.00.50 suffers from a cross site scripting vulnerability. Continue reading...