Security UserCake 1.3 Cross Site Scripting / Information Disclosure December 17, 2015 007admin UserCake version 1.3 suffers from cross site scripting and information disclosure vulnerabilities.