CVE-2023-33287
MediumCVSS 5.4Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
A stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before 3.8.0 for Confluence allows attackers to store and execute arbitrary JavaScript via a crafted payload injected into the tables.
Risk Assessment
This vulnerability may lead to the execution of malicious code in the user's context, posing a risk of data theft or session hijacking.
Recommendation
It is recommended to update the Inline Table Editing application to version 3.8.0 or later to mitigate this vulnerability.
Original NVD description (English source)
A stored cross-site scripting (XSS) vulnerability in the Inline Table Editing application before 3.8.0 for Confluence allows attackers to store and execute arbitrary JavaScript via a crafted payload injected into the tables.