Description

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the /secure/admin/ImporterFinishedPage.jspa error message. The affected versions are before version 8.13.12, and from version 8.14.0 before 8.20.1.

Remediation

References

CVE-2021-41304

Related Vulnerabilities

WordPress Other Vulnerability (CVE-2016-2222)

WordPress Plugin Database for Contact Form 7, WPforms, Elementor forms Cross-Site Scripting (1.3.8)

Apache Tomcat version older than 6.0.16

WordPress Plugin Facebook for WooCommerce Cross-Site Request Forgery (1.9.14)

WordPress Plugin Custom Frontend Login Registration Form Multiple Cross-Site Scripting Vulnerabilities (1.01)

Severity

Medium

Classification

CVE-2021-41304 CWE-707

Tags

Missing Update Known Vulnerabilities