PT-2019-13960

Name of the Vulnerable Software and Affected Versions Confluence Server versions prior to 1.5.0 Description The issue allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element. Recommendations For Confluence Server versions prior to 1.5.0, update...

CVE-2019-15053: Improper Neutralization of Input During Web Page Generation

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element...