Description
Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with write permission to inject arbitrary web script or HTML via unspecified vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin AIT Themes-CSV Import/Export Arbitrary File Upload (3.0.3)
WordPress 3.8.x Cross-Domain Flash Injection Vulnerability (3.8 - 3.8.24)
MediaWiki Other Vulnerability (CVE-2006-1498)
WordPress Plugin WP-Ban Cross-Site Scripting (1.69)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2019-9637)