Discovered by Michael Newton on behalf of The Missing Link Security
XSS in all comments fields in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to perform an account takeover via crafted comments.
Discovered in: 3.3.1.6
Fixed in: 3.3.10.9
