In \Xray Test Management for Jira\ prior to version 3.5.5 remote authenticated attackers can cause XSS in the Pre-Condition Summary entry point via the summary field of a Create Pre-Condition action for a new Test Issue.