Security Kagao 3.0 Cross Site Scripting / SQL Injection June 27, 2016 007admin Leave a comment Kagao version 3.0 suffers from cross site scripting and remote SQL injection vulnerabilities.