Nuke Evolution version 2.0.9d suffers from multiple client-side cross site scripting vulnerabilities.