Squiz CMS - Multiple Cross-Site Scripting / XML External Entity Injection Vulnerabilities