← All advisories

Medium severity5.4NVD Advisory· Published Jul 13, 2022· Updated Jun 17, 2026

CVE-2022-32274

CVE-2022-32274

Description

The Transition Scheduler add-on 6.5.0 for Atlassian Jira is prone to stored XSS via the project name to the creation function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Ttpsc/The Scheduler
cpe:2.3:a:ttpsc:the_scheduler:6.5.0:*:*:*:*:jira:*:*
Atlassian/Jiracpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)
Atlassian/Transition Schedulerllm-create
Range: = 6.5.0

Patches

Vulnerability mechanics

References

2

www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2022-040.txtnvdExploitThird Party Advisory
marketplace.atlassian.com/apps/37456/the-schedulernvdVendor Advisory

News mentions

0

No linked articles in our index yet.