description: The NotificationRepresentationFactoryImpl class in Atlassian Universal Plugin Manager before version 2.22.9 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the name of user submitted add-on names.
problem types: Cross Site Scripting (XSS)
affected:
{
product: Universal Plugin Manager
vendor: Atlassian
versions:
lessThan: 2.22.9, status: affected, version: unspecified, versionType: custom
}