CVE-2022-25189

CVE-2022-25189 : Jenkins Custom Checkbox Parameter Plugin 1.1 and earlier does not escape parameter names of custom checkbox parameters, causing stored XSS exploitable by attackers with Item/Configure permission. The plugin was updated in 1.2 to escape parameter names. Impact is stored XSS; explo...

CVE-2022-43425

CVE-2022-43425 affects Jenkins Custom Checkbox Parameter Plugin (versions ≤ 1.4). The issue is a stored XSS caused by not escaping the name/description of Custom Checkbox Parameter parameters on parameter-listing views, exploitable by users with Item/Configure permission. Exploitation requires pa...