Security ProjectSend r561 Ultimate Cross Site Scripting / Path Disclosure December 19, 2014 007admin ProjectSend version r561 Ultimate suffers from cross site scripting and path disclosure vulnerabilities.