Not rated
CVE-2021-21630 Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting…
Description
Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Jenkins Extra Columns Plugin 1.22 | earliest → 1.22 | No fix stated |