Security Absolut Engine 1.73 Cross Site Scripting / SQL Injection December 31, 2014 007admin CMS Absolute Engine version 1.73 suffers from cross site scripting and remote SQL injection vulnerabilities.