Kayako SupportSuite versions below 3.30.00 suffer from cross site scripting and SQL injection vulnerabilities.