Project Open CMS version 5.0.3 suffers from cross site scripting and remote SQL injection vulnerabilities.