CVE-2020-29444: Atlassian Confluence Data Center

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

Affected versions of Team Calendar in Confluence Server before 7.11.0 allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting Vulnerability in admin global setting parameters.

Affected products

• Atlassian Confluence Data Center: before 7.11.0 (fixed in 7.11.0)
• Atlassian Confluence Server: before 7.11.0 (fixed in 7.11.0)

Published 2021-05-07. Last modified 2026-06-17.