Lucene search

K
osvGoogleOSV:GHSA-QG66-XV7V-M834
HistoryMay 24, 2022 - 5:28 p.m.

Stored XSS vulnerability in computer-queue-plugin Plugin

2022-05-2417:28:25
Google
osv.dev
11
xss vulnerability
computer-queue-plugin
agent/configure permission
software

EPSS

0.001

Percentile

22.0%

computer-queue-plugin Plugin 1.5 and earlier does not escape the agent name in tooltips.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Agent/Configure permission.

computer-queue-plugin Plugin 1.6 escapes the agent name in tooltips.

EPSS

0.001

Percentile

22.0%

Related for OSV:GHSA-QG66-XV7V-M834