X3 CMS 0.5.1.1 Cross Site Request Forgery / Cross Site Scripting

X3 CMS versions 0.5.1 and 0.5.1.1 suffer from cross site request forgery and cross site scripting vulnerabilities.