Atlassian Confluence Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-18084)

Description

The usermacros resource in Atlassian Confluence Server before version 6.3.4 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability through the description of a macro.

Remediation

References

CVE-2017-18084

Related Vulnerabilities

WordPress Plugin Conditional Marketing Mailer for WooCommerce Unspecified Vulnerability (1.6)

WordPress Plugin Google Doc Embedder Arbitrary File Disclosure (2.4.6)

GibbonEdu Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2024-51337)

WordPress Plugin WP eCommerce Security Bypass (3.8.14.3)

Jboss EAP CVE-2013-4210 Vulnerability (CVE-2013-4210)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N