Description
The /servicedesk/customer/portals resource in Jira Service Desk Server and Data Center before version 4.10.0 allows remote attackers with project administrator privileges to inject arbitrary HTML or JavaScript names via an Cross Site Scripting (XSS) vulnerability by uploading a html file.
Remediation
References
Related Vulnerabilities
PHP Other Vulnerability (CVE-2007-5424)
MySQL CVE-2019-2819 Vulnerability (CVE-2019-2819)
Joomla! Core 3.0.x Cross-Site Scripting (3.0.0 - 3.0.3)
WordPress Plugin Minimal Coming Soon & Maintenance Mode-Coming Soon Page Security Bypass (1.87)
Atlassian Jira Improper Authentication Vulnerability (CVE-2022-0540)