CSRF and XSS on www.acronis.com