Microweber version 1.0.3 suffers from cross site request forgery and stored cross site scripting vulnerabilities.