Kusaba X versions 0.9.1 and below suffers from a cross site scripting vulnerability and a cross site request forgery vulnerability that allows for arbitrary SQL statement execution.
Source: Kusaba X 0.9.1 Cross Site Request Forgery / Cross Site Scripting
