Description
An issue was discovered in Collabtive 3.0 and later. managefile.php is vulnerable to XSS: when the action parameter is set to movefile and the id parameter corresponds to a project the current user has access to, the file and target parameters are reflected.
Remediation
References
Related Vulnerabilities
Internet Information Services Other Vulnerability (CVE-2002-1182)
WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.15)
WordPress Plugin Absolute Privacy 'abpr_authenticateUser()' Security Bypass (2.0.5)
WordPress Plugin ThemeHigh WooCommerce Wishlist and Comparison Cross-Site Request Forgery (1.0.4)
WordPress Plugin Levo Slideshow Multiple Vulnerabilities (2.3)