Mura CMS 7.0.6967 allows admin/?muraAction= XSS attacks related to admin/core/views/carch/list.cfm admin/core/views/carch/loadsiteflat.cfm admin/core/views/cusers/inc/dsp_nextn.cfm admin/core/views/cusers/inc/dsp_search_form.cfm admin/core/views/cusers/inc/dsp_users_list.cfm admin/core/views/cusers/list.cfm and admin/core/views/cusers/listusers.cfm.