CVE-2018-1999029

CVE-2018-1999029 affects Jenkins Shelve Project Plugin versions up to 1.5, where ShelveProjectAction/index.jelly and ShelvedProjectsAction/index.jelly are vulnerable to stored XSS. An attacker with Job/Configure permission can inject JavaScript that executes in other users’ browsers when they per...