FlyCms 1.0 is vulnerable to Cross Site Scripting (XSS) in the email settings of the website settings section.