Description

Export HTML Report in Atlassian Jira Server and Jira Data Center before version 8.5.14, from version 8.6.0 before 8.13.6, and from version 8.14.0 before 8.16.1 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability.

Remediation

References

CVE-2021-26083

Related Vulnerabilities

WordPress Plugin WP Dynamic Keywords Injector Cross-Site Request Forgery (2.3.15)

Magento Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') Vulnerability (CVE-2020-9583)

WordPress Plugin Contact Form Email Cross-Site Scripting (1.1.49)

WordPress Plugin WP Page Builder Cross-Site Scripting (1.2.6)

XWiki Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2023-29522)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2021-26083