Medium severity5.4NVD Advisory· Published May 7, 2021· Updated Jun 17, 2026
CVE-2020-29444
CVE-2020-29444
Description
Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnerability in admin global setting parameters.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- cpe:2.3:a:atlassian:confluence_data_center:*:*:*:*:*:*:*:*Range: <7.11.0
cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:atlassian:confluence_server:*:*:*:*:*:*:*:*range: <7.11.0
- (no CPE)range: <7.11.0
- (no CPE)range: unspecified
- Range: <7.11.0
Patches
Vulnerability mechanics
References
1- jira.atlassian.com/browse/CONFSERVER-61266nvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.