Description

Collabtive 3.1 is vulnerable to Cross-site scripting (XSS) via the name parameter under (a) action=add or action=edit within managemilestone.php file and (b) action=addpro within admin.php file.

Remediation

References

CVE-2024-48707

Related Vulnerabilities

Oracle Database Server CVE-2011-2230 Vulnerability (CVE-2011-2230)

Ruby on Rails Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-3086)

WordPress Plugin Integration for Gravity Forms and Pipedrive Cross-Site Scripting (1.0.6)

Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2012-0796)

WordPress Plugin Uploader 'uploadify.php' Arbitrary File Upload (1.0.4)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2024-48707