Sutra's Airkiosk is susceptible to a cross site scripting vulnerability due to using an old formlib.pl.
241e37d44a0cb51ab483952e36bd9ea68450306c1e47ba68b4410ce6f5bb6baf
Secunia Security Advisory - Skien has reported a vulnerability in AirKiosk, which can be exploited by malicious people to conduct cross-site scripting attacks.
637b1eaa172c4dcbc427cde9d6cf5e89b83ca290b506cb2febebeb6a12e1b704