Security Neos CMS 2.0.3 Cross Site Scripting / Shell Upload November 24, 2015 007admin Leave a comment Neos CMS version 2.0.3 suffers from cross site scripting and remote shell upload vulnerabilities.