Description
Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| M-Files | Hubshare | 3.3.1.6 | — |