Havalite CMS 1.1.7 has a stored XSS vulnerabilityReferenceshttp://www.openwall.com/lists/oss-security/2013/01/08/4