Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the parser identifier when rendering charts, resulting in a stored cross-site scripting vulnerability...
5.4CVSS5.3AI score0.00735EPSS
SaveExploits0References2
OSV•added 2020/06/03 1:15 p.m.•21 views
CVE-2020-2193
Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the parser identifier when rendering charts, resulting in a stored cross-site scripting vulnerability...
