2 matches found
CVE-2021-21660
Jenkins Markdown Formatter Plugin 0.1.0 and earlier does not sanitize crafted link target URLs, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with the ability to edit any description rendered using the configured markup formatter...
5.4CVSS5.4AI score0.01087EPSS
SaveExploits0References1
CVE-2021-21660: Improper Neutralization of Input During Web Page Generation
Jenkins Markdown Formatter Plugin 0.1.0 and earlier does not sanitize crafted link target URLs, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers with the ability to edit any description rendered using the configured markup formatter...
5.4CVSS5.7AI score0.01087EPSS
SaveExploits0References2
20