Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-25363 EUVD-2025-6390GHSA-7vrv-rgqg-9p2j

An authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) b…

Published Mar 13, 2025 · Updated Mar 19, 2025 · Assigned by mitre

Description

An authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) before v4.1.69-dc allows attackers with Administrator privileges to execute arbitrary Javascript in context of a user's browser via injecting a crafted payload into the HTML field of a template.

References