PT-2013-5479

Name of the Vulnerable Software and Affected Versions Atlassian JIRA versions prior to 6.0.5 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the name parameter to the "secure/admin/user/DeleteUser!default.jspa" endpoint. Th...