CVE-2022-36131

The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-07-22

Last modified

2024-08-03

Weaknesses

CWE-79

Affected products

• Better Pdf Exporter (Midori-global)

References

• https://marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=overview&hosting=server
• https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-038.txt