PHPJabbers Vacation Rental Script version 4.0 suffers from a cross site request forgery vulnerability.