CVE-2013-5319

Atlassian JIRA <6.0.5 - XSS

Title source: llm

Description

Cross-site scripting (XSS) vulnerability in secure/admin/user/views/deleteuserconfirm.jsp in the Admin Panel in Atlassian JIRA before 6.0.5 allows remote attackers to inject arbitrary web script or HTML via the name parameter to secure/admin/user/DeleteUser!default.jspa.

References (8)

Scores

EPSS 0.0051
EPSS Percentile 66.1%

Details

CWE
CWE-79
Status published
Products (6)
atlassian/jira < 6.0.4
atlassian/jira
atlassian/jira
atlassian/jira
atlassian/jira
n/a/n/a
Published Aug 20, 2013
Tracked Since Feb 18, 2026