PageLayer before 1.3.5 allows reflected XSS via color settings.

By admin