Description

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability in the Screens Modal view. The affected versions are before version 8.5.11, from version 8.6.0 before 8.13.3, and from version 8.14.0 before 8.15.0.

Remediation

References

CVE-2020-36234

Related Vulnerabilities

osCommerce Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-43718)

WordPress Plugin PWA for WP & AMP Unspecified Vulnerability (1.0.8)

WordPress Plugin Gravity Forms Advanced File Uploader Unspecified Vulnerability (1.18)

WordPress Plugin AVK-Shop Multiple Cross-Site Scripting Vulnerabilities (1.1.1)

SharePoint Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-8580)

Severity

Medium

Classification

CVE-2020-36234 CWE-707

Tags

Missing Update Known Vulnerabilities