NetSight
IP …
medium5.4

CVE-2020-29444

Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnera…

Impact

Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnerability in admin global setting parameters.

Affected products

VendorProductAffected versions
AtlassianConfluence Data Center
before 7.11.0
AtlassianConfluence Server
before 7.11.0

Weakness classification

CWE-79

References