CVE:CVE-2011-4754
CNNVD:CNNVD-201112-315
Parallels Plesk Small Business Panel 10.2.0版本中存在多个跨站脚本（XSS）漏洞。远程攻击者可以借助到PHP脚本特制的输入注入任意web脚本或者HTML，正如smb/app/available/id/apscatalog/和某些其他文件证明的。
solution:Upgrade parallels parallels_plesk_small_business_panel to a higher version than 10.2.0,and avoid the version 10.2.0