WiKID wClient-PHP versions 3.0-2 and below suffer from multiple cross site scripting vulnerabilities.