Security PHPback Cross Site Scripting / SQL Injection January 26, 2017 007admin Leave a comment PHPback versions prior to 1.3.1 suffer from cross site scripting and remote SQL injection vulnerabilities.