Description

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.

Remediation

References

CVE-2018-20824

Related Vulnerabilities

Joomla! Core 3.9.x Cross-Site Request Forgery (3.9.0 - 3.9.22)

MySQL CVE-2017-3462 Vulnerability (CVE-2017-3462)

WordPress Plugin Quotes Collection Cross-Site Request Forgery (1.5.5.1)

Python Improper Restriction of XML External Entity Reference Vulnerability (CVE-2013-0340)

WordPress Plugin WP Review Slider SQL Injection (12.1)

Severity

Medium

Classification

CVE-2018-20824 CWE-707

Tags

Missing Update Known Vulnerabilities