Secunia Security Advisory – David Vieira-Kurz has reported some vulnerabilities in xenis.creator, which can be exploited by malicious people to conduct cross-site scripting and SQL injection attacks.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/51947/sa22716.txt
Source: https://packetstormsecurity.com/files/51947/Secunia-Security-Advisory-22716.html