Page2Flip version 2.5 suffers from a cross site scripting vulnerability in the create user functionality.