https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-23T18:17:56.814576+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2019-22636 cnvd-2019-22636 2026-10-23T18:17:56.890722+00:00 cnvd-2019-22636 https://cve.radiocsirt.org/vuln/euvd-2026-53586 EUVD-2026-53586 2026-10-23T18:17:56.890760+00:00 EUVD-2026-53586 https://cve.radiocsirt.org/vuln/fkie_cve-2019-10335 fkie_cve-2019-10335 2026-10-23T18:17:56.890775+00:00

A stored cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier allowed attackers able to configure jobs in Jenkins or control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in the plugin-provided output on build status pages.

 https://cve.radiocsirt.org/vuln/ghsa-fx9p-2qvx-pgjv GHSA-fx9p-2qvx-pgjv — Jenkins ElectricFlow Plugin is vulnerable to stored cross site scripting vulnerability 2026-10-23T18:17:56.890805+00:00

Affected: Maven: org.jenkins-ci.plugins:electricflow

The plugin adds metadata displayed on build pages during its operations.

Any user content was not escaped, resulting in a cross-site scripting vulnerability allowing users with Job/Configure permission, or attackers controlling API responses received from ElectricFlow to render arbitrary HTML and JavaScript on Jenkins build pages.

Build metadata is now filtered through a HTML formatter that only allows showing basic HTML, neutralizing any unsafe data. Additionally, all builds executed after the security update is applied will now properly escape content received from ElectricFlow.

 https://cve.radiocsirt.org/vuln/gsd-2019-10335 gsd-2019-10335 2026-10-23T18:17:56.890833+00:00 gsd-2019-10335