Found an XSS Exploit: https://fresh-hotel.org/home/Auditor
click to see and heres a picClick image for larger version. 

Name:	lollh.jpg 
Views:	226 
Size:	11.6 KB 
ID:	252
lol