Vicidial version 1.4.0.20 suffers from a reflective cross site scripting vulnerability. Continue reading...