CVE-2022-25203: Improper Neutralization of Input During Web Page Generation

Jenkins Team Views Plugin 0.9.0 and earlier does not escape team names, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Overall/Read permission...

PT-2022-17142 · Jenkins · Jenkins Team Views Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Team Views Plugin version 0.9.0 and earlier Description: The issue results in a stored cross-site scripting XSS vulnerability. This occurs because team names are not properly escaped, allowing attackers with Overall/Read permission to...

Jenkins plugin cross-site scripting vulnerability

Jenkins plug-ins are plug-ins that provide appropriate functionality for Jenkins. JenkinsTeam Views Plugin cross-site scripting vulnerability. This vulnerability allows an attacker to execute JavaScript code on the client side...

Post views 2.6.1.2 - search_input Parameter Cross-Site Scripting (XSS)

The post-views WordPress plugin was affected by a searchinput Parameter Cross-Site Scripting XSS security vulnerability...