CVE-2022-30963

CVE-2022-30963 affects Jenkins JDK Parameter Plugin (1.0 and earlier). The vulnerability is a stored XSS caused by not escaping the JDK parameter name and description in views that display parameters, enabling exploitation by attackers with Item/Configure permission on affected dashboards/pages.