Users of the SAK single-page application website have spotted coming-in request validation vulnerabilities. The website has been found to be vulnerable to xss and Cross-Site Request Forgery (CSRF) Attacks. SC5 online ltd helped SAK develop their new site as a fast-loading single-page application (SPA). Attempts to reach either company have bore no fruit but we hope that users can be careful while using such websites.