Email address is not validated when updating user profile

On the view profile page /secure/ViewProfile.jspa it's possible to update your user profile /secure/EditProfile!default.jspa?username=admin to an invalid email address. See attached screenshots. !Screen Shot 2017-09-28 at 2.49.48 PM.png|thumbnail! !Screen Shot 2017-09-28 at 2.49.58...

Unfixed XSS vulnerability at www.earningswhispers.com

Security researcher Xylitol, has submitted on 10/01/2009 a cross-site-scripting XSS vulnerability affecting www.earningswhispers.com, which at the time of submission ranked 208860 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/07/2009. It i...

CVE-2008-6831: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Atlassian JIRA Enterprise Edition 3.13 allow remote attackers to inject arbitrary web script or HTML via the 1 fullname Full Name parameter in the ViewProfile page or 2 returnUrl parameter in a form, as demonstrated using...