CVE-2021-43942

Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cross-Site Scripting (XSS) vulnerability in the /rest/collectors/1.0/template/custom endpoint. To exploit this issue, the attacker must trick a user into visiting a malicious website. The affected versions are before version 8.13.15, and from version 8.14.0 before 8.20.3.

• CWE-79

• https://jira.atlassian.com/browse/JRASERVER-73068Issue Tracking, Vendor Advisory
• https://jira.atlassian.com/browse/JRASERVER-73068Issue Tracking, Vendor Advisory

Published

Jan 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43937Elcomplus SmartPTT SCADA Server web application does not, or…8.8
• CVE-2021-43938Elcomplus SmartPTT SCADA Server is vulnerable to an unauthen…9.8
• CVE-2021-43939Elcomplus SmartPTT is vulnerable when a low-authenticated us…8.8
• CVE-2021-4394The Locations plugin for WordPress is vulnerable to Cross-Si…4.3
• CVE-2021-43940Affected versions of Atlassian Confluence Server and Data Ce…7.8
• CVE-2021-43941Affected versions of Atlassian Jira Server and Data Center a…6.5
• CVE-2021-43943Affected versions of Atlassian Jira Service Management Serve…4.8
• CVE-2021-43944This issue exists to document that a security improvement in…7.2
• CVE-2021-43945Affected versions of Atlassian Jira Server and Data Center a…4.8
• CVE-2021-43946Affected versions of Atlassian Jira Server and Data Center a…6.5
• CVE-2021-43947Affected versions of Atlassian Jira Server and Data Center a…7.2
• CVE-2021-43948Affected versions of Atlassian Jira Service Management Serve…4.3