Extra Columns (Jenkins) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 25 known versions, newest CVE from 2021-03-30. Vendor: Jenkins.

CVEs of Extra Columns

• CVE-2021-21630 - CVSS 5.4 (medium), 2021-03-30: Jenkins Extra Columns Plugin 1.22 and earlier does not escape parameter values in the build parameters column, resulting in a stored cross-site scripting…
• CVE-2016-3101 - CVSS 5.4 (medium), 2017-02-09: Cross-site scripting (XSS) vulnerability in the Extra Columns plugin before 1.17 in Jenkins allows remote attackers to inject arbitrary web script or HTML by…