Security MBLS Flex CMS 0.7.2 SQL Injection / Cross Site Scripting February 23, 2017 007admin MBLS Flex CMS version 0.7.2 suffers from remote SQL injection and cross site scripting vulnerabilities.