An issue was discovered in Rumpus 8.2.10 on macOS. By crafting a directory name, it is possible to activate JavaScript in the context of the web application after invoking the rename folder functionality.
https://pastebin.com/3YdFZCKe
https://www.maxum.com/Rumpus/Download.html
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8514