Description

The number range searcher component in Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before version 8.13.6, and from version 8.14.0 before version 8.16.1 allows remote attackers inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability.

Remediation

References

CVE-2021-26078

Related Vulnerabilities

Joomla! Core 1.0.x Multiple Vulnerabilities (1.0.0 - 1.0.13)

WordPress Plugin Clipta Video Informer Cross-Site Scripting (1.0)

WordPress Plugin Admin Columns Pro Cross-Site Scripting (5.5.1)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0737)

WordPress Plugin Email Subscribers by Icegram Express-Email Marketing, Newsletters, Automation for WordPress & WooCommerce Cross-Site Scripting (4.0.13)

Severity

Medium

Classification

CVE-2021-26078 CWE-707

Tags

Missing Update Known Vulnerabilities