Threats tagged 'ghsa-f8h4-46xv-h7jj'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
High	8.0	CVE-2026-42524Org.jenkins ci.plugins:htmlpublisher: Jenkins HTML Publisher Plugin has a XSS vulnerability in the legacy wrapper file High8.02026-04-29GCVE DatabaseCVE-2026-42524 The Jenkins HTML Publisher Plugin versions 427 and earlier contain a stored cross-site scripting (XSS) vulnerability due to improper escaping of the job name and URL in the legacy wrapper file. This vulnerability can be exploited by attackers who have Item/Configure permission. The issue is fixed in version 427.1, which properly escapes these fields to prevent XSS attacks. Report on CVE-2026-42524 Vulnerability CWE-79 #ghsa-f8h4-46xv-h7jj #maven	GCVE Database	2026-04-29

Page 1 of 1