CMS Failed PCI/Security
 

Hello,

I am just getting a gateway set-up with beanstream for my site, and apparently our site failed the PCI compliance security check due to the following issues.

Does anyone know how to resolve these?

1. Parameter-Based Cross-Site Scripting (XSS) Vulnerability\
"Parameters on this page are not properly filtered, allowing cross-site attacks to be executed."

2. Logout Page Cross-Site Request Forgery Vulnerability
"The logout page of this site is prone to a cross-site request forgery vulnerability. Attackers could exploit this
condition to prevent legitimate users from accessing the site."

Thanks