Description

Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.

Remediation

References

CVE-2016-4317

Related Vulnerabilities

IBM WebSEAL Improper Certificate Validation Vulnerability (CVE-2019-4150)

WordPress Plugin JS MultiHotel Cross-Site Scripting (2.2.1)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4112)

phpMyAdmin Other Vulnerability (CVE-2001-0478)

WordPress Plugin ShiftNav-Responsive Mobile Menu Cross-Site Scripting (1.5.2)

Severity

Medium

Classification

CVE-2016-4317 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities