CVE-2022-34783
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by…
published June 30, 2022
Patch now
High probability of exploitation
NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.
What it is
Jenkins Plot Plugin 2.1.10 and earlier does not escape plot descriptions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
The record
Technical detail
- CVSS
- Not scored
- CVSS v4.0
- Not supplied
- EPSS
- 0.81383 · 99.6th percentile
- Published
- 2022-06-30T17:46Z
EPSS history
Timeline