Underconstructionpage versions prior to 3.75 suffer from a persistent cross site scripting vulnerability.