Subrion CMS version 4.0.5 suffers from cross site request forgery and cross site scripting vulnerabilities.