WordPress gSlideShow 0.1 CSRF / XSS

WordPress gSlideShow plugin version 0.1 suffers from cross site request forgery and cross site scripting vulnerabilities.