Oxwall version 1.8.0 build 9900 suffers from cross site scripting and open redirection vulnerabilities.