Description

The WallboardServlet resource in Jira before version 7.13.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the cyclePeriod parameter.

Remediation

References

CVE-2018-20824

Related Vulnerabilities

ATutor Improper Privilege Management Vulnerability (CVE-2017-1000003)

WordPress Plugin Church Admin 'id' Parameter Cross-Site Scripting (0.33.4.5)

phpMyAdmin Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2043)

WordPress Plugin Contextual Adminbar Color Cross-Site Scripting (0.2)

TYPO3 Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2005-4875)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2018-20824