Kajona version 4.7 suffers from cross site scripting and directory traversal vulnerabilities. Continue reading...