TTT-C is susceptible to multiple cross site scripting attacks due to the fact that it does not sanitize variables.