Security eFront Learning CMS 3.6.15.6 Cross Site Scripting February 24, 2016 007admin Leave a comment eFront Learning CMS version 3.6.15.6 suffers from a persistent cross site scripting vulnerability in the message attachment.