CVE-2022-34188

CVE-2022-34188 describes a stored XSS vulnerability in Jenkins Hidden Parameter Plugin versions 0.0.4 and earlier, where the plugin fails to escape the name and description of Hidden Parameter parameters on parameter-displaying views. This allows attackers with Item/Configure permission to inject...