Attackers can execute malicious scripts on other users' computers. They can do this by entering JavaScript code in different URL parameters such as “fs[project_id][o]”, “fs[project_id][v]”, “fs[issuetype][o]”,etc. on the “search” functionality, which belongs to the “Issues” page. The malicious user would have to lure the victim to follow a link in order to have the attack executed on the victim's computer.