Filtered by vendor Jenkins Project
Subscriptions
Filtered by product Jenkins Customizable Header Plugin
Subscriptions
Total
1 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2026-84673 | 1 Jenkins Project | 1 Jenkins Customizable Header Plugin | 2026-09-03 | 8.8 High |
| Jenkins Customizable Header Plugin 295.v2544b_ca_19b_97 and earlier allows overwriting the plugin's appearance configuration through Stapler data binding, allowing attackers to configure a custom SVG icon containing inline JavaScript, resulting in a stored cross-site scripting (XSS) vulnerability. | ||||
Page 1 of 1.