The web based project management tool Celoxis is susceptible to cross site scripting vulnerabilities.