Lucene search
+L

9 matches found

Github Security Blog
Github Security Blog
added 2022/05/24 5:28 p.m.26 views

Stored XSS vulnerability in computer-queue-plugin Plugin

computer-queue-plugin Plugin 1.5 and earlier does not escape the agent name in tooltips. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Agent/Configure permission. computer-queue-plugin Plugin 1.6 escapes the agent name in tooltips...

5.4CVSS5AI score0.00735EPSS
SaveExploits0References5Affected Software1
Rows per page
Query Builder