Lucene search
+L

41 matches found

Atlassian
Atlassian
added 2012/06/22 1:38 a.m.27 views

XSS vulnerability in the "move" page action with html/js in the page name

There is an persistent xss vector in the 'move' page action on a page, where the javascript/html payload is included in the name of the page. Steps to reproduce: 1.create a page named: "''/'kasdfjas'dfasdf 2. on the page click on the "move" option under the tools drop-down menu 3. see an alert bo...

2.7AI score
SaveExploits0
Rows per page
Query Builder