Stored Cross Site Scripting

Jenkins is vulnerable to stored cross site scripting. An attacker is able to exploit a stored Cross Site Scripting as the f:expandable TextBox form control interprets its content as HTML when expanded...