Description The Work Time Calendar app before 4.7.1 for Jira allows XSS. References https://marketplace.atlassian.com/apps/1213545/work-time-calendar-for-jira/version-history