Information from Hiki development team

Vulnerability ID:JVN#38138980
Title:Hiki cross-site scripting vulnerability
Status:Vulnerable

No English statement on this vulnerability is available from the vendor yet.