What’s Vulnerable › Vulnerabilities
CVE-2022-36131
- Severity: medium (CVSS 6.1 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2022-07-22 · updated 2026-06-17
- Weakness: CWE-79
Description
The Better PDF Exporter add-on 10.0.0 for Atlassian Jira is prone to stored XSS via a crafted description to the PDF Templates overview page.
Affected products
References
- https://marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=overview&hosting=server
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-038.txt
- https://marketplace.atlassian.com/apps/5167/better-pdf-exporter-for-jira?tab=overview&hosting=server
- https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-038.txt
Get alerted when CVE-2022-36131 or the next vulnerability affects your stack