Jira XSS Vulnerability

[Jeawoong Choi]

Hi
Currently we are using Jira version 7.13.18.

A few days ago, while checking for security vulnerabilities, we put "> <script > alert(String.fromCharCode(88,83,83))</script> in the parameter value, and the script started working.

The security center of my company considers this issue to be a great vulnerability.

Is there any way to solve it?

thank you.