CVE-2023-33007

CVE-2023-33007 concerns the Jenkins LoadComplete support Plugin (version 1.0 and earlier). The vulnerability arises from not escaping the LoadComplete test name in the plugin’s UI, creating a stored XSS condition that is exploitable by attackers who have Item/Configure permission. Public referenc...