CVE-2022-32274

Name of the Vulnerable Software and Affected Versions Atlassian Jira Transition Scheduler add-on version 6.5.0

Description The issue concerns a stored XSS vulnerability via the project name to the creation function. This allows for potential malicious script execution when a user interacts with a specially crafted project name.

Recommendations For version 6.5.0, consider disabling the project creation function until a patch is available to prevent exploitation of the stored XSS vulnerability. Restrict access to the project name field to minimize the risk of malicious input.