2 matches found
CVE-2022-34786
Jenkins Rich Text Publisher Plugin 1.4 and earlier does not escape the HTML message set by its post-build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...
5.4CVSS0.006EPSS
SaveExploits0References3
CVE-2022-34786: Improper Neutralization of Input During Web Page Generation
Jenkins Rich Text Publisher Plugin 1.4 and earlier does not escape the HTML message set by its post-build step, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to configure jobs...
5.4CVSS5.9AI score0.006EPSS
SaveExploits0References2
20