CVE-2016-10716 The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspa#period/month URI.
MediumCVSS 5.4
EPSS 0.71%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspa#period/month URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mail.ru calendar | < 2.5.0.61 | 2.5.0.61 |
References
- marketplace.atlassian.com third-party-advisory
- packetstormsecurity.com third-party-advisory vdb-entry