Thread-ITSQL is susceptible to cross site scripting attacks in its Topic Title, Name and Message fields.