PT-2026-93783

Name of the Vulnerable Software and Affected Versions Jenkins Gitee Plugin versions prior to 1301.v8957053c7902 Description Stored cross-site scripting XSS occurs because the plugin fails to escape the sender name within Gitee push webhook payloads in build causes. This allows attackers who can...

CVE-2026-92140: Improper Neutralization of Input During Web Page Generation

Jenkins Gitee Plugin 1301.v8957053c7902 and earlier does not escape the sender name from Gitee push webhook payloads in build causes, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to trigger builds via the Jenkins Gitee Plugin webhook endpoint...