A cross site scripting vulnerability was found in the xen_hotfix page of the Citrix NITRO SDK.