Early this morning a vulnerability was discovered in osCMax v2.0.2. Output was not being properly sanitized in the admin panel, allowing an attacker to inject malicious content into the output string.
osCMax v2.0.3 has been posted to osCMax.com and the vulnerability has been patched. The security fix has also been added in SVN. It is recommended [...]