Cross Site Scripting vulnerability in ED01-CMS v.1.0 allows an attacker to obtain sensitive information via the categories.php component.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')