Jenkins Wall Display Plugin Cross-site Scripting vulnerability

Wall Display Master Project Plugin does not properly escape the customTheme query parameter, resulting in a reflected cross-site scripting vulnerability. As of publication of this advisory, there is no fix...

PT-2019-11772 · Jenkins · Jenkins Wall Display Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Wall Display Plugin versions 0.6.34 and earlier Description: A reflected cross-site scripting issue allows attackers to inject arbitrary HTML and JavaScript into web pages. The customTheme query parameter is not properly escaped,...

Reflected XSS vulnerability in jenkinswalldisplay

jenkinswalldisplay does not properly escape the customTheme query parameter, resulting in a reflected cross-site scripting vulnerability. As of publication of this advisory, there is no fix...