Medium severity5.4NVD Advisory· Published May 31, 2023· Updated Jun 17, 2026

CVE-2023-33287

Description

A stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before 3.8.0 for Confluence allows attackers to store and execute arbitrary JavaScript via a crafted payload injected into the tables.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Actonic/Inline Table Editing
cpe:2.3:a:actonic:inline_table_editing:*:*:*:*:*:confluence:*:*
Range: <3.8.0
Confluence/Inline Table Editing application for Confluencedescription
Atlassian/Inline Table Editingllm-fuzzy
Range: <3.8.0

Patches

Vulnerability mechanics

References

actonic.de/produkte/inline-table-editing/nvdProduct
marketplace.atlassian.com/apps/1217271/inline-table-editing/version-historynvdProductRelease Notes
marketplace.atlassian.com/apps/1217271/inline-table-editingnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000