Fortunescripts Lynda Clone vulnerabilities

• fortunescripts lynda clone FS Lynda Clone has XSS via the keywords parameter to tutorial/ or the edit_profile_first_name... CVE-2017-17904 5.4 MediumDecember 25, 2017
• fortunescripts lynda clone FS Lynda Clone has CSRF via user/edit_profile, as demonstrated by adding content to the user panel. CVE-2017-17903 8.8 HighDecember 25, 2017