Mambo versions less than or equal to 4.6 suffer from XSS.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/46716/Mambo-4.6.txt
Source: https://packetstormsecurity.com/files/46716/Mambo-4.6.txt.html