CVE-2018-19498 – Pages For Bitbucket Server 2.6.0 Cross Site Scripting

https://notcve.org/view.php?id=CVE-2018-19498

The Simplenia Pages plugin 2.6.0 for Atlassian Bitbucket Server has XSS. El plugin Simplenia Pages 2.6.0 para Atlassian Bitbucket Server tiene Cross-Site Scripting (XSS). Pages for Bitbucket Server versions 2.6.0 and below suffer from multiple cross site scripting vulnerabilities. • http://packetstormsecurity.com/files/151466/Pages-For-Bitbucket-Server-2.6.0-Cross-Site-Scripting.html https://marketplace.atlassian.com/apps/1212525/pages-for-bitbucket-server/version-history https://seclists.org/bugtraq/2019/Jan/53 https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2018-037.txt • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •