CumulusClips 2.4.1 Code Execution / CSRF / Cross Site Scripting

CumulusClips version 2.4.1 suffers from code execution, cross site request forgery, cross site scripting vulnerabilities.