CVE-2019-8935

Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...

PT-2019-19269

Name of the Vulnerable Software and Affected Versions Collabtive version 3.1 Description The issue allows for XSS via the manageuser.php?action=profile API endpoint, specifically through the id parameter. Recommendations For Collabtive version 3.1, avoid using the id parameter in the...

CVE-2019-8935: Improper Neutralization of Input During Web Page Generation

Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter...