Description

Cross-site scripting (XSS) vulnerability in the default markup formatter in Jenkins 1.523 allows remote attackers to inject arbitrary web script or HTML via the Description field in the user configuration.

Remediation

References

CVE-2013-5573

Related Vulnerabilities

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.2.12)

MyBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2010-4624)

WordPress Plugin Funnel Builder by CartFlows-Create High Converting Sales Funnels For WordPress Cross-Site Scripting (1.6.12)

WordPress Plugin YT-Audio:Audio Hosting From YouTube in WordPress 'v' Parameter Cross-Site Scripting (1.7)

WordPress 4.4.x Arbitrary File Deletion Vulnerability (4.4 - 4.4.15)

Severity

Medium

Classification

CVE-2013-5573 CWE-707

Tags

Missing Update Known Vulnerabilities