EIP-2026-102358

The advisory details a persistent XSS vulnerability in AppFusions Doxygen for Atlassian Confluence, where improper file validation allows arbitrary script code to be embedded in uploaded Doxygen files. The vulnerability is traced to the `renderContent()` method in `DoxygenFileServlet.java`, which fails to sanitize user input.