Nodes Studio CMS suffers from cross site scripting, path disclosure, and remote SQL injection vulnerabilities.