Cross-Site Scripting (XSS)

lartak/humhub is vulnerable to cross-site scripting XSS. A remote attacker is able to inject arbitrary Javascript into a victim's browser via a /protected/vendor/codeception/codeception/tests/data/app/view/index.php POST request...