CVE-2020-15944: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the Gantt-Chart module before 5.5.5 for Jira. Due to missing validation of user input, it is vulnerable to a persistent XSS attack. An attacker can embed the attack vectors in the dashboard of other users. To exploit this vulnerability, an attacker has to be authenticat...

CVE-2020-15943: Improper Neutralization of Input During Web Page Generation

An issue was discovered in the Gantt-Chart module before 5.5.4 for Jira. Due to a missing privilege check, it is possible to read and write to the module configuration of other users. This can also be used to deliver an XSS payload to other users' dashboards. To exploit this vulnerability, an...

PT-2020-14727

Name of the Vulnerable Software and Affected Versions Gantt-Chart for Jira versions prior to 5.5.5 Description The issue is related to missing validation of user input, making it susceptible to a persistent XSS attack. An attacker must be authenticated to exploit this vulnerability, and they can...

Ricksoft WBS Gantt-Chart add-on cross-site scripting vulnerability (CNVD-2014-09219)

Ricksoft WBS Gantt-Chart add-on is a project management application. A cross-site scripting vulnerability in Ricksoft WBS Gantt-Chart add-on 7.8.1 and prior versions for JIRA allows remote, authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Ricksoft WBS Gantt-Chart add-on cross-site scripting vulnerability (CNVD-2014-09218)

Ricksoft WBS Gantt-Chart add-on is a project management application. A cross-site scripting vulnerability in Ricksoft WBS Gantt-Chart add-on 7.8.1 and prior versions for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-7268

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

CVE-2014-7267

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

Cross site scripting

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

Cross site scripting

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

CVE-2014-7268

CVE-2014-7268 is a cross-site scripting (XSS) vulnerability in the data-export feature of the Ricksoft WBS Gantt-Chart add-on for JIRA, affecting version 7.8.1 and earlier. The reported issue injects arbitrary web script/HTML via unspecified vectors. The provided sources do not specify the underl...

CVE-2014-7267

CVE-2014-7267 is an XSS in the Ricksoft WBS Gantt-Chart add-on for JIRA, affecting versions up to 7.8.1 and earlier. The vulnerability resides in the output-page generator component, where unsanitized input can allow remote authenticated users to inject arbitrary script or HTML via unspecified ve...

CVE-2014-7268

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

CVE-2014-7267

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

PT-2014-7871

Name of the Vulnerable Software and Affected Versions Ricksoft WBS Gantt-Chart add-on versions 7.8.1 and earlier for JIRA Description A cross-site scripting XSS issue exists in the output-page generator of the Ricksoft WBS Gantt-Chart add-on for JIRA, allowing remote authenticated users to inject...

PT-2014-7872

Name of the Vulnerable Software and Affected Versions Ricksoft WBS Gantt-Chart add-on versions 7.8.1 and earlier for JIRA Description A cross-site scripting XSS issue exists in the data-export feature, allowing remote attackers to inject arbitrary web script or HTML. This can be achieved via...

CVE-2014-7267: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

CVE-2014-7268: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the data-export feature in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7267...

WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

Overview WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in exporting data, which may lead to cross-site scripting CWE-79. Note that this vulnerability is...

WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

Overview WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in output page generation, which may lead to cross-site scripting CWE-79. Note that this vulnerability i...

JVN#76515134: WBS Gantt-Chart for JIRA vulnerable to cross-site scripting

WBS Gantt-Chart for JIRA provided by Ricksoft Inc. is an add-on for JIRA which provides WBS Work Breakdown Structure and Gantt-Chart features. WBS Gantt-Chart for JIRA contains a flaw in exporting data, which may lead to cross-site scripting CWE-79. Impact An arbitrary script may be executed on t...