CVE-2016-6283: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action...

PT-2017-8954

Name of the Vulnerable Software and Affected Versions Atlassian Confluence versions prior to 5.10.6 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to the "pages/doeditattachment.action" API endpoint...