Description
The issue search resource in Atlassian Jira before version 7.4.2 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the orderby parameter.
Remediation
References
Related Vulnerabilities
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1635)
MySQL CVE-2024-21162 Vulnerability (CVE-2024-21162)
WordPress Plugin Issuu Panel Local/Remote File Inclusion (1.6)
TYPO3 Deserialization of Untrusted Data Vulnerability (CVE-2020-15098)
WordPress Plugin Premium Addons for Elementor Multiple Cross-Site Scripting Vulnerabilities (4.2.7)