| Package | Affected versions | Patched versions |
|---|---|---|
| calendar | < 2.5.0.61 | 2.5.0.61 |
The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspa#period/month URI.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free