CVE-2014-7267: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the output-page generator in the Ricksoft WBS Gantt-Chart add-on 7.8.1 and earlier for JIRA allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2014-7268...

PT-2014-7871

Name of the Vulnerable Software and Affected Versions Ricksoft WBS Gantt-Chart add-on versions 7.8.1 and earlier for JIRA Description A cross-site scripting XSS issue exists in the output-page generator of the Ricksoft WBS Gantt-Chart add-on for JIRA, allowing remote authenticated users to inject...