CVE-2019-15053
The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element.
CVSS 3.0 · 6.8 Medium
EPSS 1.3%
KEV · Not listed
Vendors
Products