CVE-2020-15944: Gantt-Chart Project Gantt-Chart

Medium severity, CVSS 5.4. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue was discovered in the Gantt-Chart module before 5.5.5 for Jira. Due to missing validation of user input, it is vulnerable to a persistent XSS attack. An attacker can embed the attack vectors in the dashboard of other users. To exploit this vulnerability, an attacker has to be authenticated.

Affected products

• Gantt-Chart Project Gantt-Chart: before 5.5.5 (fixed in 5.5.5)

Published 2020-08-04. Last modified 2026-06-17.