CVE-2021-27222

—

CVSS 3.1

5.4 medium

EPSS

<1%p58

Published

Mar 8, 2021 (Mar 8, 2021)

Modified

Jun 17, 2026

Description

In the "Time in Status" app before 4.13.0 for Jira, remote authenticated attackers can cause Stored XSS.

Vendors: obss
Products: time in status
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.9%)

In the news0 stories

No ingested article mentions this CVE yet.