| Package | Affected versions | Patched versions |
|---|---|---|
| collaborative portal server | = 3.4.0 |
Cross-site scripting (XSS) vulnerability in popup_image in Collaborative Portal Server (CPS) 3.4.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the pos argument.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free