CVE-2016-6283

Cross-site scripting (XSS) vulnerability in Atlassian Confluence before 5.10.6 allows remote attackers to inject arbitrary web script or HTML via the newFileName parameter to pages/doeditattachment.action.

Date published : 2017-01-18

http://www.securityfocus.com/bid/95288

https://www.exploit-db.com/exploits/40989/