CVE-2019-8935 (collabtive)

Collabtive 3.1 allows XSS via the manageuser.php?action=profile id parameter.

Source: CVE-2019-8935 (collabtive)