CVE-2025-53658

The Jenkins Applitools Eyes Plugin (version 1.16.5 and earlier ) is vulnerable to stored cross-site scripting (XSS) because it fails to escape the Applitools URL on the build page. An attacker with Item/Configure permissions can inject malicious scripts into this field, which are then executed in...