CVE-2010-1164

Atlassian JIRA versions 3.12 through 4.1 are affected by multiple cross-site scripting (XSS) vulnerabilities. Remote attackers can inject arbitrary web scripts or HTML through various parameters and pages, including the Colour Picker , User Picker , Group Picker , and the Announcement Banner Prev...