Zekvan Arslan

**Nome do software vulnerável e versões afetadas** ilchCMS versão 2.1.23 **Descrição** A vulnerabilidade permite XSS por meio do parâmetro `Link` no endpoint “index.php/partner/index”. **Recomendações** Para o ilchCMS versão 2.1.23, evite usar o parâmetro `Link` no endpoint “index.php/partner/index” até que a vulnerabilidade seja resolvida.

**Name of the Vulnerable Software and Affected Versions** Collabtive version 3.1 **Description** The issue allows for XSS via the `manageuser.php?action=profile` API endpoint, specifically through the `id` parameter. **Recommendations** For Collabtive version 3.1, avoid using the `id` parameter in the `manageuser.php?action=profile` API endpoint until the issue is resolved. As a temporary workaround, consider restricting access to this endpoint to minimize the risk of exploitation.