CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

EUVD-2026-70131

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

CVE-2026-84665

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

Stored XSS vulnerability in sonar

sonar 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permission. TIP: On Jenkins 2.53...

CVE-2026-84665: Improper Neutralization of Input During Web Page Generation

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

PT-2026-84788

Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the javascript: scheme, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with Item/Configure permissi...

EUVD-2024-0432

Malicious code in bioql PyPI...

GHSA-V5GQ-QVJQ-8P53 Grafana Cross-site Scripting (XSS)

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

SUSE CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

Security update for grafana, grafana-piechart-panel, grafana-status-panel (moderate)

openSUSE Security Update: Security update for grafana, grafana-piechart-panel, grafana-status-panel Announcement ID: openSUSE-SU-2020:0892-1 Rating: moderate References: 1170557 Cross-References: CVE-2019-15043 CVE-2020-12245 CVE-2020-13379 Affected Products: openSUSE Leap 15.2 An update that fix...

grafana: Cross-site Scripting (XSS) in dashboard links

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

Grafana Cross-Site Scripting Vulnerability

Grafana is a set of open source monitoring tools that provide a visual monitoring interface. The tool is mainly used to monitor and analyze Graphite, InfluxDB and Prometheus and so on. A cross-site scripting vulnerability exists in the dashboard links in versions prior to Grafana 5.2.0-beta1. A...

CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

Cross site scripting

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

UBUNTU-CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

CVE-2018-12099

Grafana before 5.2.0-beta1 has XSS vulnerabilities in dashboard links...

CVE-2018-12099

Grafana prior to 5.2.0-beta1 is affected by XSS in dashboard links (CVE-2018-12099). The issue stems from an incomplete fix, with later Nessus entries noting unpatched vectors in Grafana 5.3.1 related to this CVE. Remediation: upgrade to Grafana 5.2.0-beta1 or newer where the fix is included.