CumulusClips version 2.4.1 suffers from code execution, cross site request forgery, cross site scripting vulnerabilities.