CVE-2020-35121

An issue was discovered in the Keysight Database Connector plugin before 1.5.0 for Confluence. A malicious user could insert arbitrary JavaScript into saved macro parameters that would execute when a user viewed a page with that instance of the macro...

CVE-2020-35121

creationtimestamp| type| source ---|---|--- 2020-12-16 02:45:54+00:00| seen| https://t.me/cibsecurity/20896...

CVE-2020-35121

The CVE-2020-35121 entry affects the Keysight Database Connector plugin for Confluence (pre-1.5.0). An attacker could inject arbitrary JavaScript into saved macro parameters, which would execute when a page with that macro is viewed, enabling client-side code execution (a cross-site scripting vec...