CVE-2020-29444

No fix known EPSS <1%CVSS 5.4

Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnerability in admin global setting parameters.

Published 2021-05-07 · CVE record · OSV

Products: Atlassian Confluence Server