CVE-2020-13655

An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user has access to, the file and target parameters are reflected...

PT-2020-13642

Name of the Vulnerable Software and Affected Versions Collabtive versions 3.0 and later Description An issue was discovered in the managefile.php file, which is vulnerable to XSS. This occurs when the action parameter is set to "movefile" and the id parameter corresponds to a project that the...