Softaculous · Webuzo · CVE-2013-6042
**Name of the Vulnerable Software and Affected Versions**
Softaculous Webuzo versions prior to 2.1.4
**Description**
The issue is related to a cross-site scripting (XSS) vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the `user` parameter in the filemanager/login.php file of the File Manager module.
**Recommendations**
For versions prior to 2.1.4, update to version 2.1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the filemanager/login.php file to minimize the risk of exploitation. Avoid using the `user` parameter in the affected module until the issue is resolved.