| Package | Affected versions | Patched versions |
|---|---|---|
| collabtive | = 3.1 |
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free