KODExplorer web file manager suffers from a cross site scripting vulnerability.