Security PHPHolidays CMS 3.00.50 Cross Site Scripting September 8, 2016 007admin Leave a comment PHPHolidays CMS version 3.00.50 suffers from a cross site scripting vulnerability.