CVE-2017-7362by Jeremyin Security Bulletinson Posted on March 31, 2017 Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack.