Stored XSS vulnerability in build-with-parameters

build-with-parameters 1.5 and earlier does not escape parameter names and descriptions. This results in a stored cross-site scripting XSS vulnerability exploitable by attackers with Job/Configure permission. build-with-parameters 1.5.1 escapes parameter names and descriptions...