BigTree before 4.2.22 has XSS in the Users management page via the name or company field.

Published Apr 30, 2018 · Updated Aug 5, 2024 · Assigned by mitre