Unauthenticated Cross Site Scripting (XSS) in Kapee < 1.7.1 versions.
Unauthenticated PHP Object Injection in Kapee < 1.7.0 versions.