CVE-2016-4318by Jeremyin Security Bulletinson Posted on April 10, 2017 Atlassian JIRA Server before 7.1.9 has XSS in project/ViewDefaultProjectRoleActors.jspa via a role name.