pfSense 2.2 Cross Site Request Forgery / Cross Site Scripting

pfSense version 2.2 suffers from cross site request forgery and cross site scripting vulnerabilities.