Description
The AssociateFieldToScreens page in Atlassian Jira Server and Data Center before version 8.18.0 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability via the name of a custom field.
Remediation
References
Related Vulnerabilities
WordPress Plugin Client Dash Cross-Site Scripting (2.1.4)
MySQL CVE-2023-22015 Vulnerability (CVE-2023-22015)
Oracle JRE CVE-2013-2456 Vulnerability (CVE-2013-2456)
WordPress Plugin Login as User or Customer Security Bypass (1.7)
Grafana Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2026-21725)