Full title: devalcms 1.4a XSS / Remote Code Execution Exploit Category: web applications Platform: unsorted # 0day.today @ http://0day.today/