Security Balero CMS 0.7.2 Cross Site Scripting April 7, 2015 007admin Leave a comment Balero CMS version 0.7.2 suffers from cross site scripting and html injection vulnerabilities.