CVE-2020-2137
Jenkins Timestamper Plugin 1.11.1 and earlier does not sanitize HTML formatting of its output, resulting in a stored XSS vulnerability exploitable by attackers with Overall/Administer permission.
CVSS 3.1 · 4.8 Medium
EPSS < 1%
KEV · Not listed
Vendors
Products