Sidu version 5.2 suffers from a cross site scripting vulnerability in the admin section.