CNIL CookieViz Cross Site Scripting / SQL Injection

CNIL CookieViz suffers from cross site scripting and remote SQL injection vulnerabilities.