Spymac Web Os 4.0 is susceptible to cross site scripting attacks due to a lack of variable sanitization.