phpTrafficA versions up to 2.3 suffer from a persistent cross site scripting vulnerability.