Description

The PieChart gadget in Atlassian Jira before version 7.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the name of a project or filter.

Remediation

References

CVE-2017-16863

Related Vulnerabilities

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37149)

WordPress 4.7.x Multiple Vulnerabilities (4.7 - 4.7.27)

WordPress Plugin SendPress Newsletters Unspecified Vulnerability (1.7.6.11)

WordPress Plugin Import CSV Directory Traversal (1.0)

Squid Out-of-bounds Write Vulnerability (CVE-2019-12527)

Severity

Medium

Classification

CVE-2017-16863 CWE-707

Tags

Missing Update Known Vulnerabilities