Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1

Export CSV
CVE-2026-42524

Stored Cross‑Site Scripting in Jenkins HTML Publisher Plugin

Jenkins HTML Publisher Plugin 427 and earlier does not escape job name and URL in the legacy wrapper file, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.

CVSS 3.1 · 8 High EPSS < 1% KEV · Not listed
Vendors
Jenkins Jenkins Project
Products
Html Publisher Jenkins Html Publisher Plugin