Falcon CMS version 1.4.3 suffers from cross site scripting and remote file inclusion vulnerabilities.