TI-2007-00861 CVE-2007-0885 · GHSA-jvxq-rfm6-xrfmCross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow…Priority LOW 39Cross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen (Rainbow.Zen) extension allows remote attackers to inject arbitrary web script or HTML via the id parameter.CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.05746 · Published 2007-02-12 · No fix listed