PHP Vacation Rental Script version 7R suffers from cross site request forgery and cross site scripting vulnerabilities.