CVE-2017-18097

The Trello board importer resource in Atlassian Jira before version 7.6.1 allows remote attackers who can convince a Jira administrator to import their Trello board to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the title of a Trello card...

PT-2018-6676

Name of the Vulnerable Software and Affected Versions: Atlassian Jira versions prior to 7.6.1 Description: The issue allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the title of a Trello card, which can be exploited when a Jira...