Jupiter CMS versions 1.1.5 and below suffer from multiple cross site scripting attack vectors. Details provided.