Description

The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of quick filters.

Remediation

References

CVE-2017-18100

Related Vulnerabilities

WordPress Plugin N-Media Post Front-end Form Arbitrary File Upload (1.0)

ZenCart Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2009-2254)

Oracle Database Server Other Vulnerability (CVE-2005-0297)

WordPress Plugin Js-appointment 'searchdata.php' SQL Injection (1.5)

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1167)

Severity

Medium

Classification

CVE-2017-18100 CWE-707

Tags

Missing Update Known Vulnerabilities