Tendoo CMS version 1.3 suffers from stored and reflective cross site scripting vulnerabilities. Continue reading...