Security ProjectSend r561 Ultimate Cross Site Scripting / Path Disclosure December 19, 2014 007admin Leave a comment ProjectSend version r561 Ultimate suffers from cross site scripting and path disclosure vulnerabilities.