CVE-2021-21616

Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...

CVE-2021-21616

The CVE-2021-21616 issue affects Jenkins Active Choices Plugin (versions 2.5.2 and earlier). The root cause is failure to escape reference parameter values, resulting in a stored XSS vulnerability exploitable by users with Job/Configure permission. The vulnerability is evidenced across multiple r...

CVE-2021-21616

Jenkins Active Choices Plugin 2.5.2 and earlier does not escape reference parameter values, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission...