CVE-2020-2193

CVE-2020-2193 affects the Jenkins ECharts API Plugin, version 4.7.0-3 and earlier, where the parser identifier is not escaped when rendering charts, causing a stored cross-site scripting (XSS) vulnerability. The issue is documented across multiple feeds (NVD, Red Hat, OSV, GHSA) and is mitigated ...

CVE-2020-2194

CVE-2020-2194 affects the Jenkins ECharts API Plugin, where versions 4.7.0-3 and earlier fail to escape the display name in the trend chart. This causes a stored cross-site scripting (XSS) vulnerability. The issue arises from missing input validation/escaping in the chart display name, enabling i...