Macs Framework version 1.14f suffers from cross site scripting and remote SQL injection vulnerabilities.