WS-2013-0244

In Tuleap, versions 4.0.9 through 6.0 are vulnerable to Cross-Site Scripting XSS in DivBased tabbed layout class page, due to the parameter “forumid” not escaped after user input...