Description

Cross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the Admin Panel in Atlassian JIRA before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via the name parameter to secure/admin/user/DeleteUser!default.jspa.

Remediation

References

CVE-2013-5319

Related Vulnerabilities

WordPress Plugin HT Mega-Absolute Addons for Elementor Page Builder Multiple Cross-Site Scripting Vulnerabilities (1.5.5)

Oracle Database Server CVE-2009-1007 Vulnerability (CVE-2009-1007)

Liferay Portal CVE-2022-42126 Vulnerability (CVE-2022-42126)

WordPress Plugin ReviewX-Multi-criteria Rating & Reviews for WooCommerce Privilege Escalation (1.6.13)

WordPress Plugin Easy Appointments Cross-Site Scripting (3.11.0)

Severity

Medium

Classification

CVE-2013-5319 CWE-707

Tags

Missing Update Known Vulnerabilities