RSMScript version 1.21 suffers from insecure cookie handling and cross site scripting vulnerabilities.