$ 0 0 Croogo CMS is prone to an HTML-injection vulnerability because it fails to properly sanitize user-supplied input.