CVE-2016-10716

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspaperiod/month URI...

CVE-2016-10716

The CVE refers to a cross-site scripting (XSS) vulnerability in the Mail.ru Calendar plugin for Atlassian Jira, affecting versions before 2.5.0.61. The XSS is triggered via the Name field in a Create Calendar action and is linked to the MailRuCalendar.jspa#period/month URI. Several connected sour...