| Package | Affected versions | Patched versions |
|---|---|---|
| collabtive | ≥ 3.0 |
An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user has access to, the file and target parameters are reflected.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free