Jenkins Dashboard View Plugin Cross-Site Scripting Vulnerability

Jenkins and Jenkins Plugin are both products of Jenkins, an application. Jenkins Plugin is an application that provides hundreds of plugins to support building, deploying, and automating any project. Jenkins Dashboard View Plugin version 2.18 and earlier is vulnerable to a cross-site scripting vulnerability that stems from the program’s failure to perform URL validation on the Iframe Portlet’s Iframe source URL. An attacker could exploit this vulnerability to execute JavaScript code on the client side.