Front Account 2.3.13 / OpenDocMan 1.2.6.2 Arbitrary HTML Rendering

Front Account version 2.3.13 and OpenDocMan version 1.2.6.2 render uploaded HTML in the DOM allowing for malicious javascript insertion that can enable cross site scripting attacks.