Security Citrix NITRO SDK xen_hotfix Cross Site Scripting March 20, 2015 007admin Leave a comment A cross site scripting vulnerability was found in the xen_hotfix page of the Citrix NITRO SDK.