JIRA Artezio Board plugin version 1.4 suffers from cross site scripting and information disclosure vulnerabilities.