groovy-postbuild is vulnerable to cross-site scripting (XSS) attacks. The library does not escape user input for badge content, allowing a malicious user to inject and execute arbitrary Javascript.
CPE | Name | Operator | Version |
---|---|---|---|
groovy postbuild | le | 1.9-h-2 |