PHP Melody version 3.0 suffers from a persistent cross site scripting vulnerability in the submitted parameter.