Ublog Reload version 1.0.5 suffers from multiple html injection vulnerabilities.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/54190/ublog-inject.txt
Source: https://packetstormsecurity.com/files/54190/ublog-inject.txt.html