vfront version 0.99.2 suffers from cross site request forgery and cross site scripting vulnerabilities. Continue reading...