Vulnerability Details CVE-2020-24897
The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) through the provided Markdown markup to the "Table from CSV" macro.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.0%
CVSS Severity
CVSS v3 Score 8.9
CVSS v2 Score 3.5
Products affected by CVE-2020-24897
-
cpe:2.3:a:stiltsoft:table_filter_and_charts_for_confluence_server:-