Description
Jenkins through 2.93 allows remote authenticated administrators to conduct XSS attacks via a crafted tool name in a job configuration form, as demonstrated by the JDK tool in Jenkins core and the Ant tool in the Ant plugin, aka SECURITY-624.
Remediation
References
Related Vulnerabilities
Zope Web Application Server CVE-2011-2528 Vulnerability (CVE-2011-2528)
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-3394)
MySQL CVE-2020-14633 Vulnerability (CVE-2020-14633)
WordPress Plugin Booster for WooCommerce Cross-Site Scripting (5.6.1)
WordPress Plugin WP Cerber Security, Anti-spam & Malware Scan Security Bypass (9.3.2)