Stiltsoft

3 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-44724 Nov 04, 07:15 MEDIUM POC PATCH This Month

The Handy Tip macro in Stiltsoft Handy Macros for Confluence Server/Data Center 3.x before 3.5.5 allows remote attackers to inject arbitrary HTML or JavaScript via a Cross-Site Scripting (XSS). Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

XSS Atlassian Handy Macros For Confluence Stiltsoft

NVD

CVSS 3.1

5.4

EPSS

0.7%

CVE-2020-24898 Aug 29, 20:15 MEDIUM This Month

The Table Filter and Charts for Confluence Server app before 5.3.26 (for Atlassian Confluence) allows SSRF via the "Table from CSV" macro (URL parameter). Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SSRF Atlassian Table Filter And Charts For Confluence Server Stiltsoft

NVD

CVSS 3.1

6.5

EPSS

0.7%

CVE-2020-24897 Aug 29, 20:15 HIGH This Week

The Table Filter and Charts for Confluence Server app before 5.3.25 (for Atlassian Confluence) allow remote attackers to inject arbitrary HTML or JavaScript via cross site scripting (XSS) through the. Rated high severity (CVSS 8.9), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Atlassian Table Filter And Charts For Confluence Server Stiltsoft

NVD

CVSS 3.1

8.9

EPSS

0.9%

CVE-2022-44724

EPSS 1% CVSS 5.4

MEDIUM POC PATCH This Month

XSS Atlassian Handy Macros For Confluence +1

NVD

CVE-2020-24898

EPSS 1% CVSS 6.5

MEDIUM This Month

SSRF Atlassian Table Filter And Charts For Confluence Server +1

NVD

CVE-2020-24897

EPSS 1% CVSS 8.9

HIGH This Week

XSS Atlassian Table Filter And Charts For Confluence Server +1

NVD