CVE-2020-36290

The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and from version 7.7.0 before version 7.7.4 allows remote attackers with permission to edit a page or blog to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the page excerpt functionality.
CVSS

No CVSS.

Configurations

No configuration.

Information

Published : 2022-07-26 04:15

Updated : 2022-07-26 11:46


NVD link : CVE-2020-36290

Mitre link : CVE-2020-36290


JSON object : View

Products Affected

No product.

CWE

No CWE.