Description

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability.

Remediation

References

CVE-2021-26083

Related Vulnerabilities

XWiki CVE-2023-40573 Vulnerability (CVE-2023-40573)

Apache HTTP Server Other Vulnerability (CVE-2010-0408)

WordPress Plugin Paid Membership, Ecommerce, Registration Form, Login Form, User Profile & Restrict Content-ProfilePress Cross-Site Scripting (3.2.15)

WordPress Plugin Edit Comments SQL Injection (0.3)

Dolibarr Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-4197)

Severity

Medium

Classification

CVE-2021-26083 CWE-707

Tags

Missing Update Known Vulnerabilities