Approved changes feed: RSS · Atom

cpe:2.3:a:thepluginpeople:enterprise_mail_handler:*:*:*:*:*:jira:*:*

part: a version: * update: *

VendorThepluginpeople (4c7fd17b-51c2-5014-9aa8-9fbcb4d3ed49)
ProductEnterprise Mail Handler (dbb3ccc1-0812-5ec1-82a6-3be9ac68f59e)
Edition*
Language*
Software edition*
Target softwarejira
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25363 vulnerable 2026-06-08 07:12:51.149837 Details available
An authenticated stored cross-site scripting (XSS) vulnerability in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) before v4.1.69-dc allows attackers with Administrator privileges to execute arbitrary Javascript in context of a user's browser via injecting a crafted payload into the HTML field of a template.
Published: 2025-03-13T00:00:00.000Z
Updated: 2025-03-19T18:42:02.616Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.