Jenkins Readonly Parameter Plugin跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. The vulnerability stems from the fact that the names and descriptions of Readonly String and Readonly Text parameters are not escaped on the view where the parameters are displayed, and can be exploited by attackers to execute JavaScript code on the client side.