medium6.5
CVE-2025-25363
An authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) before v4.1.69-dc all…
Impact
An authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) before v4.1.69-dc allows attackers with Administrator privileges to execute arbitrary Javascript in context of a user's browser via injecting a crafted payload into the HTML field of a template.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thepluginpeople | Enterprise Mail Handler | from 4.1.53-dc before 4.1.69-dc |