fronsetia version 1.1 suffers from an XML external entity injection vulnerability.