Security CumulusClips 2.4.1 Code Execution / CSRF / Cross Site Scripting September 7, 2016 007admin Leave a comment CumulusClips version 2.4.1 suffers from code execution, cross site request forgery, cross site scripting vulnerabilities.