Description
Cross-site scripting (XSS) vulnerability in Jenkins before 1.551 and LTS before 1.532.2 allows remote attackers to inject arbitrary web script or HTML via the iconSize cookie.
Remediation
References
Related Vulnerabilities
PHP NULL Pointer Dereference Vulnerability (CVE-2016-10162)
TYPO3 Files or Directories Accessible to External Parties Vulnerability (CVE-2021-21355)
WordPress Plugin BadgeOS SQL Injection (3.7.0)
WordPress Plugin Content Audit Blind SQL Injection (1.6)
WordPress Plugin My Calendar Multiple Cross-Site Scripting Vulnerabilities (1.10.1)