PlantUML (Macro database-info) - Stored Cross Site Scripting

Owned by Michael Griffel

18.12.2021

1 min read

The Database Information macro is a component of PlantUML and can be used to inject JavaScript code in Confluence pages, leading to a stored cross site scripting vulnerability.

https://sec-consult.com/de/vulnerability-lab/advisory/mehrere-cross-site-scripting-schwachstellen-in-confluence-marketplace-plugins/

This vulnerability was fixed in release 6.44.