< 4.4.2
4.4.2
Algoo Tracim before 4.4.2 allows XSS via HTML file upload.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.