EPSS
Percentile
29.5%
Jenkins TestNG Results Plugin is vulnerable to Cross-Site Scripting (XSS). The vulnerability exists due to lack of escaping of values that are parsed from TestNG report files which allows an attacker to inject and execute arbitrary JavaScript.
github.com/advisories/GHSA-h3hg-r97v-5r9w
www.jenkins.io/security/advisory/2023-05-16/#SECURITY-3047