Uploaded image for project: 'Confluence Data Center'
  1. Confluence Data Center
  2. CONFSERVER-16644

XSS vulnerability can be exploited with the Userlister macro

XMLWordPrintable

      Use the following markup:

      {userlister:groups=<script>alert('Vulerable')</script>}

      Whenever the page is viewed, the script will be executed.

          Form Name

            [CONFSERVER-16644] XSS vulnerability can be exploited with the Userlister macro

              Unassigned Unassigned
              mhrynczak Mark Hrynczak (Inactive)
              Affected customers:
              0 This affects my team
              Watchers:
              0 Start watching this issue

                Created:
                Updated:
                Resolved: