Description
Cross-site scripting (XSS) vulnerability in Jenkins Core in Jenkins before 1.438, and 1.409 LTS before 1.409.3 LTS, when a stand-alone container is used, allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages.
Remediation
References
Related Vulnerabilities
MySQL CVE-2015-0441 Vulnerability (CVE-2015-0441)
WordPress Plugin Backup Bank:WordPress Backup Security Bypass (4.0.28)
WordPress Plugin WP-Matomo (WP-Piwik) Cross-Site Scripting (1.0.4)
WebLogic CVE-2022-21257 Vulnerability (CVE-2022-21257)
MediaWiki Improper Authentication Vulnerability (CVE-2026-58029)