Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2020-36290

The Livesearch macro in Confluence Server and Data Center before version 7.4.5, from version 7.5.0 before 7.6.3, and from version 7.7.0 before version 7.7.4 allows remote attackers with permission to edit a page or blog to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the page excerpt functionality.

Published

2022-07-26T04:15:11.070

Last Modified

2024-11-21T05:29:13.573

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 5.4 (MEDIUM)

Weaknesses
  • Type: Primary
    CWE-79
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application atlassian confluence_data_center < 7.4.5 Yes
Application atlassian confluence_data_center < 7.6.3 Yes
Application atlassian confluence_data_center < 7.7.4 Yes
Application atlassian confluence_server < 7.4.5 Yes
Application atlassian confluence_server < 7.6.3 Yes
Application atlassian confluence_server < 7.7.4 Yes
References