cve/2019/CVE-2019-15053.md

CVE-2019-15053

Description

The "HTML Include and replace macro" plugin before 1.5.0 for Confluence Server allows a bypass of the includeScripts=false XSS protection mechanism via vectors involving an IFRAME element.

POC

Reference

• https://github.com/l0nax/CVE-2019-15053
• https://github.com/l0nax/CVE-2019-15053

Github

• https://github.com/0xT11/CVE-POC
• https://github.com/developer3000S/PoC-in-GitHub
• https://github.com/hectorgie/PoC-in-GitHub
• https://github.com/l0nax/CVE-2019-15053