CVE-2017-7359

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack.