Description

The EditIssue.jspa resource in Atlassian Jira before version 7.6.7 and from version 7.7.0 before version 7.10.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the issuetype parameter.

Remediation

References

CVE-2018-5232

Related Vulnerabilities

MediaWiki Other Vulnerability (CVE-2013-4570)

WordPress Plugin bbPress Cross-Site Scripting (2.5.8)

Craft CMS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2024-37843)

Moodle Incorrect Authorization Vulnerability (CVE-2020-25701)

WordPress Plugin mTouch Quiz Multiple Vulnerabilities (3.1.2)

Severity

Medium

Classification

CVE-2018-5232 CWE-707

Tags

Missing Update Known Vulnerabilities