Reflected XSS vulnerability in jenkinswalldisplay

jenkinswalldisplay does not properly escape the customTheme query parameter, resulting in a reflected cross-site scripting vulnerability. As of publication of this advisory, there is no fix...

PT-2019-11772 · Jenkins · Jenkins Wall Display Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Wall Display Plugin versions 0.6.34 and earlier Description: A reflected cross-site scripting issue allows attackers to inject arbitrary HTML and JavaScript into web pages. The customTheme query parameter is not properly escaped,...