CVE-2017-7360

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack.