description: Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnerability in admin global setting parameters.
problem types: Cross Site Scripting
affected:
{
product: Confluence Server
vendor: Atlassian
versions:
lessThan: 7.11.0, status: affected, version: unspecified, versionType: custom
}