Description

Cross-site scripting (XSS) vulnerability in Jenkins before 1.514, LTS before 1.509.1, and Enterprise 1.466.x before 1.466.14.1 and 1.480.x before 1.480.4.1 allows remote authenticated users with write permission to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2013-2033

Related Vulnerabilities

Joomla Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-15700)

MySQL CVE-2012-0492 Vulnerability (CVE-2012-0492)

WordPress Plugin Membership & Content Restriction-Paid Member Subscriptions Multiple Vulnerabilities (2.4.1)

WordPress 5.9.x Multiple Vulnerabilities (5.9 - 5.9.5)

Zenphoto Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2013-7242)

Severity

Low

Classification

CVE-2013-2033 CWE-707

Tags

Missing Update Known Vulnerabilities