Xoops version 2.5.6 suffers from multiple cross site scripting vulnerabilities…. Xoops version 2.5.6 suffers from multiple cross site scripting vulnerabilities.

Read more http://packetstormsecurity.com/files/123148/xoops256-xss.txt