Xyntax

The issue allows remote attackers to conduct PHP Object Injection attacks. This is achieved by sending crafted serialized data in a salt cookie within a login request to the `includes/classes/ia.core.users.php` file.

A cross-site scripting (XSS) issue exists in the user prompt function, allowing remote authenticated users to inject arbitrary web script or HTML via tag names.

A directory traversal issue in the file "jcss.php" allows a remote attacker to launch a PHP object injection by uploading a serialized file.