forkcms/forkcms — pull request #469 by Diewy (2013-04-19 08:20:10+00:00)
Title: Validation on Facebook admin ids

A XSS exploit was [reported](http://packetstormsecurity.com/files/121345/Fork-CMS-Cross-Site-Scripting.html) in the settings page of the backend.

Users that had access to the backend and the settings page could insert javascript via the Facebook admin ids.

No users reported that this exploit was used on their website.