InstantCMS version 1.10.2 suffers from a cross site scripting vulnerability via the REFERER header…. InstantCMS version 1.10.2 suffers from a cross site scripting vulnerability via the REFERER header.

Read more http://packetstormsecurity.com/files/123299/instantcms-xssredir.txt