CVE-2021-3298
CVE-2021-3298
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter.
CVSS 5.4 · Medium · EPSS 2.2% · Public exploit
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
collabtive Ubuntu:16.04:LTS
- Versions
- 2.0+dfsg-6
- 2.0+dfsg-6ubuntu1
- 2.0+dfsg-6ubuntu1.1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published