Description
Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.
Remediation
References
Related Vulnerabilities
PHP Resource Management Errors Vulnerability (CVE-2012-0830)
Drupal Core 9.1.x Cross-Site Scripting (9.1.0 - 9.1.13)
WordPress Plugin User Profile Picture Information Disclosure (2.4.0)
Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-18650)
WordPress Plugin WP-Spreadshirt-Gallery Cross-Site Scripting (1.3)