Security BIGACE 2.7.8 Cross Site Scripting / File Upload June 17, 2015 007admin Leave a comment BIGACE version 2.7.8 suffers from cross site scripting and file upload vulnerabilities.