Security UserCake 1.3 Cross Site Scripting / Information Disclosure December 17, 2015 007admin Leave a comment UserCake version 1.3 suffers from cross site scripting and information disclosure vulnerabilities.