Cross site scripting

2022-11-0407:15:00

PRIOn knowledge base

www.prio-n.com

stiltsoft handy macros

confluence server

data center

cross-site scripting

xss vulnerability

0.001 Low

EPSS

Percentile

31.2%

JSON

The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS) vulnerability.

CPENameOperatorVersion
handy_macros_for_confluencege3.0.0
handy_macros_for_confluencelt3.5.5

CPE	Name	Operator	Version
	handy_macros_for_confluence	ge	3.0.0
	handy_macros_for_confluence	lt	3.5.5

References

stiltsoft.atlassian.net/browse/VD-3

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-049.txt

0.001 Low

EPSS

Percentile

31.2%

JSON

Related for PRION:CVE-2022-44724