Description

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.

Remediation

References

CVE-2018-20824

Related Vulnerabilities

WordPress Plugin Event Registration 'id' Parameter SQL Injection (5.43)

WebLogic CVE-2018-3197 Vulnerability (CVE-2018-3197)

WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-5106)

WordPress Plugin WP Statistics SQL Injection (12.0.7)

WordPress Plugin UpdraftPlus WordPress Backup Security Bypass (1.22.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2018-20824