| Package | Affected versions | Patched versions |
|---|---|---|
| html include and replace macro | ≥ 1.1, ≤ 1.4.2 |
The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free