Zoph 0.9.1 Cross Site Scripting / SQL Injection

Zoph versions 0.9.1 and below suffer from cross site scripting and remote SQL injection vulnerabilities.