Apache OpenMeetings 3.1.0 Cross Site Scripting

`Severity: Moderate  
  
Vendor: The Apache Software Foundation  
  
Versions Affected: Apache OpenMeetings 3.1.0  
  
Description: The value of the URL's "swf" query parameter is  
interpolated into the JavaScript tag without being escaped, leading to  
the reflected XSS.  
  
All users are recommended to upgrade to Apache OpenMeetings 3.1.2  
  
Credit: This issue was identified by Matthew Daley  
  
  
Apache OpenMeetings Team  
`