The Plugin People Enterprise Mail Handler for Jira Data Center Authenticated Stored Cross-Site Scripting Vulnerability

A stored cross-site scripting vulnerability has been identified in The Plugin People Enterprise Mail Handler for Jira Data Center (JEMH) versions prior to 4.1.69-dc. This vulnerability allows authenticated attackers with Administrator privileges to execute arbitrary JavaScript in the context of a user's browser. The issue arises from the ability to inject a crafted payload into the HTML field of a template.

Impact

Exploitation of this vulnerability allows for authenticated stored cross-site scripting, where injected scripts are executed in the context of the user.