Validating String Parameter Plugin

Source repositories

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2022-34791	Jenkins Project Validating Email Parameter	Med	0.35	5.4	0.01		Jun 30, 2022	Jenkins Validating Email Parameter Plugin 1.10 and earlier does not escape the name and description of its parameter type, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVE-2020-2257	Jenkins Project Validating String Parameter	Med	0.28	5.4	0.01		Sep 16, 2020	Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.

CVE-2022-34791MedJun 30, 2022
Jenkins Project
Validating Email Parameter
risk 0.35cvss 5.4epss 0.01
Jenkins Validating Email Parameter Plugin 1.10 and earlier does not escape the name and description of its parameter type, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
CVE-2020-2257MedSep 16, 2020
Jenkins Project
Validating String Parameter
risk 0.28cvss 5.4epss 0.01
Jenkins Validating String Parameter Plugin 2.4 and earlier does not escape various user-controlled fields, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.