Description

The PieChart gadget in Atlassian Jira before version 7.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a project or filter.

Remediation

References

CVE-2017-16863

Related Vulnerabilities

SugarCRM Improper Input Validation Vulnerability (CVE-2017-14509)

WebLogic CVE-2017-10137 Vulnerability (CVE-2017-10137)

WordPress Plugin Slimstat Analytics Cross-Site Scripting (4.6.2)

WordPress Plugin Ultimate Member-User Profile, Registration, Login, Member Directory, Content Restriction & Membership Information Disclosure (1.2.5)

MySQL CVE-2021-2201 Vulnerability (CVE-2021-2201)

Severity

Medium

Classification

CVE-2017-16863 CWE-707

Tags

Missing Update Known Vulnerabilities