Security XhP CMS 0.5.1 Cross Site Request Forgery / Cross Site Scripting October 19, 2016 007admin Leave a comment XhP CMS version 0.5.1 suffers from cross site request forgery and cross site scripting vulnerabilities.