BigAce CMS 3.0 Cross Site Scripting

BigAce CMS version 3.0 suffers from a cross site scripting vulnerability.