Description

Atlassian Confluence Server before 5.9.11 has XSS on the viewmyprofile.action page.

Remediation

References

CVE-2016-4317

Related Vulnerabilities

Drupal Improper Input Validation Vulnerability (CVE-2012-5653)

WordPress Plugin Appointments PHP Object Injection (2.2.1)

WordPress Plugin Vitamin Multiple Arbitrary File Disclosure Vulnerabilities (1.0.0)

WordPress Plugin Count per Day Multiple Cross-Site Scripting Vulnerabilities (3.5.4)

WordPress Plugin Mail Masta Multiple SQL Injection Vulnerabilities (1.0)

Severity

Medium

Classification

CVE-2016-4317 CWE-707 CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N

Tags

Missing Update Known Vulnerabilities