medium5.4
CVE-2023-33287
A stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before 3.8.0 for Confluence allows attackers to store and execute arb…
Impact
A stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before 3.8.0 for Confluence allows attackers to store and execute arbitrary JavaScript via a crafted payload injected into the tables.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Actonic | Inline Table Editing | before 3.8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://actonic.de/produkte/inline-table-editing/
- https://marketplace.atlassian.com/apps/1217271/inline-table-editing/version-history
- https://marketplace.atlassian.com/apps/1217271/inline-table-editing?hosting=server&tab=versions
- https://actonic.de/produkte/inline-table-editing/
- https://marketplace.atlassian.com/apps/1217271/inline-table-editing/version-history
- https://marketplace.atlassian.com/apps/1217271/inline-table-editing?hosting=server&tab=versions