CVE-2016-10716: Mail.ru Calendar

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

The Mail.ru Calendar plugin before 2.5.0.61 for Atlassian Jira has XSS via the Name field in a Create Calender action, related to a MailRuCalendar.jspa#period/month URI.

Affected products

• Mail.ru Calendar: before 2.5.0.61 (fixed in 2.5.0.61)

Published 2018-03-16. Last modified 2026-06-17.