EUVD-2014-8494

Malware in sbrugna...

CVE-2014-8658

Cross-site scripting XSS vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Confluence allows remote authenticated users with permissions to create or edit content to inject arbitrary web script or HTML via the versionComment parameter to pages/doeditpage.acti...

Cross site scripting

Cross-site scripting XSS vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Confluence allows remote authenticated users with permissions to create or edit content to inject arbitrary web script or HTML via the versionComment parameter to pages/doeditpage.acti...

CVE-2014-8658

RefinedWiki Original Theme for Confluence (3.x before 3.5.13 and 4.x before 4.0.12) has an XSS flaw. Untrusted Input via versionComment enables arbitrary script/HTML for remote authenticated editors. Root cause: insufficient sanitization of versionComment in pages/doeditpage.action. Impact: poten...

CVE-2014-8658

Cross-site scripting XSS vulnerability in RefinedWiki Original Theme 3.x before 3.5.13 and 4.x before 4.0.12 for Confluence allows remote authenticated users with permissions to create or edit content to inject arbitrary web script or HTML via the versionComment parameter to pages/doeditpage.acti...

SEC Consult SA-20141029-1 :: Persistent cross site scripting in Confluence RefinedWiki Original Theme

SEC Consult Vulnerability Lab Security Advisory 20141029-1 ======================================================================= title: Persistent cross site scripting product: Confluence RefinedWiki Original Theme vulnerable version: 3.x - 4.0.x fixed version: 4.0.12 impact: high homepage:...

Confluence RefinedWiki Original Theme Cross Site Scripting

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Persistent cross site scripting product: Confluence RefinedWiki Original Theme vulnerable version: 3.x - 4.0.x fixed version: 4.0.12 impact: high homepage:...