Description

EditworkflowScheme.jspa in Jira Server and Jira Data Center before version 8.5.14, and from version 8.6.0 before version 8.13.6, and from 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability.

Remediation

References

CVE-2021-26080

Related Vulnerabilities

Sqlite Improper Check for Unusual or Exceptional Conditions Vulnerability (CVE-2019-19646)

WordPress Cookie Data PHP Code Injection Vulnerability (1.5 - 1.5.1.3)

Jboss EAP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-3530)

WordPress Plugin WP-Live Chat by 3CX Information Disclosure (8.0.28)

XWiki Improper Neutralization of Directives in Dynamically Evaluated Code ('Eval Injection') Vulnerability (CVE-2022-41931)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2021-26080