Description

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability.

Remediation

References

CVE-2021-26078

Related Vulnerabilities

Drupal Core 5.x Multiple Cross-Site Request Forgery Vulnerabilities (5.0 - 5.1)

WordPress Plugin WP-Business Directory (wp-ttisbdir) Multiple Cross-Site Scripting Vulnerabilities (1.0.2)

WordPress Plugin WORDPRESS VIDEO GALLERY SQL Injection (2.0)

WordPress Plugin Ultimate WordPress Auction Cross-Site Request Forgery (1.0.0)

WordPress Plugin Registration Forms-User Registration Forms, Invitation-Based Registrations, Front-end User Profile, Login Form & Content Restriction Open Redirect (2.0.19)

Severity

Medium

Classification

CVE-2021-26078 CWE-707

Tags

Missing Update Known Vulnerabilities