Description Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name. Remediation References CVE-2016-4318 Related Vulnerabilities WordPress Plugin Bliss Gallery Arbitrary File Upload (2.3) Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4906) Apache Tomcat Data Processing Errors Vulnerability (CVE-2014-0227) XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2023-45135) MySQL CVE-2016-0608 Vulnerability (CVE-2016-0608) Severity Medium Tags Missing Update Known Vulnerabilities CWE-707 CVE-2016-4318