Wishlist Project Wishlist vulnerabilities

• wishlist project wishlist Cross-site scripting (XSS) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x before... CVE-2015-3357 3.5 LowApril 21, 2015
• wishlist project wishlist Cross-site request forgery (CSRF) vulnerability in the Wishlist module before 6.x-2.7 and 7.x-2.x... CVE-2015-3354 5.8 MediumApril 21, 2015