Description
The Jira Importers Plugin in Atlassian Jira Server and Data Cente from version with 7.0.10 before 7.6.16, from 7.7.0 before 7.13.8, from 8.0.0 before 8.1.3, from 8.2.0 before 8.2.5, from 8.3.0 before 8.3.4 and from 8.4.0 before 8.4.1 allows remote attackers with Administrator permissions to gain remote code execution via a template injection vulnerability through the use of a crafted PUT request.
Remediation
References
Related Vulnerabilities
WordPress Plugin Share and Follow 'admin.php' Cross-Site Scripting (1.80.3)
WordPress Plugin Wow Viral Signups SQL Injection (2.1)
WordPress 4.1.x Multiple Vulnerabilities (4.1 - 4.1.18)
PHP Out-of-bounds Write Vulnerability (CVE-2022-4900)
WordPress Plugin Patreon WordPress PHP Object Injection (1.2.1)