Pixie · Pixie Cms · CVE-2009-1067
**Name of the Vulnerable Software and Affected Versions**
Pixie CMS version 1.01a
**Description**
A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the `x` parameter in the "index.php" file.
**Recommendations**
For Pixie CMS version 1.01a, as a temporary workaround, consider restricting access to the `x` parameter in the "index.php" file until a patch is available.