CVE-2022-34196

CVE-2022-34196 affects Jenkins with the REST List Parameter Plugin prior to 1.6.0. The plugin does not escape the name and description of REST list parameters on parameter-displaying views, causing a stored XSS vulnerability exploitable by attackers who have Item/Configure permission. Connected a...

CVE-2021-21635

CVE-2021-21635 affects Jenkins REST List Parameter Plugin up to version 1.3.0. The issue is a stored XSS vulnerability caused by not escaping a parameter name reference in embedded JavaScript, exploitable by an attacker with Job/Configure permission. The linked OSV/GHSA entries confirm the vulner...