Description

EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability.

Remediation

References

CVE-2021-26080

Related Vulnerabilities

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-8958)

WordPress Plugin Acurax On Click Pop Under Multiple Unspecified Vulnerabilities (2.2.1)

Jboss EAP CVE-2013-1896 Vulnerability (CVE-2013-1896)

WordPress Plugin WP Fastest Cache Directory Traversal (0.8.9.5)

ownCloud Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-1500)

Severity

Medium

Classification

CVE-2021-26080 CWE-707

Tags

Missing Update Known Vulnerabilities