CVE-2021-3298: O-Dyn Collabtive

Medium severity, CVSS 5.4. EPSS: 2.1% chance of exploitation in the next 30 days.

Collabtive 3.1 allows XSS when an authenticated user enters an XSS payload into the address section of the profile edit page, aka the manageuser.php?action=edit address1 parameter.

Affected products

• O-Dyn Collabtive: version 3.1 only

Published 2021-01-29. Last modified 2026-06-17.