CVE-2020-2266

CVE-2020-2266 affects Jenkins Description Column Plugin 1.3 and earlier. The vulnerability arises from insufficient escaping of the job description in the column tooltip, enabling stored cross-site scripting (XSS) exploitable by attackers with Job/Configure permission. Affected software: Jenkins ...