Description

Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.

Remediation

References

CVE-2016-4317

Related Vulnerabilities

SharePoint Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-1103)

WordPress Plugin Tutor LMS-eLearning and online course solution Security Bypass (2.6.1)

WordPress Plugin WP Dynamic Keywords Injector Cross-Site Request Forgery (2.3.15)

WordPress Plugin Kish Guest Posting 'uploadify.php' Arbitrary File Upload (1.2)

WordPress Plugin CevherShare Multiple Vulnerabilities (2.1)

Severity

Medium

Classification

CVE-2016-4317 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities