Combodo iTop contains a stored Cross-site Scripting vulnerability, which can be attacked by uploading file with malicious script.