Description

Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name.

Remediation

References

CVE-2016-4318

Related Vulnerabilities

Jenkins Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2025-67639)

Magento Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-8114)

Joomla Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2018-11325)

ReviveAdserver Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2013-5954)

WordPress Other Vulnerability (CVE-2016-2222)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2016-4318