https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T02:14:54.868683+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-218723 EUVD-2026-218723 2026-10-09T02:14:54.871768+00:00 EUVD-2026-218723 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28679 fkie_cve-2023-28679 2026-10-09T02:14:54.871798+00:00

Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the "Generic JS Portlet" feature that lets a user populate a portlet using a custom JavaScript expression, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.

 https://cve.radiocsirt.org/vuln/ghsa-h9h3-jx58-6hqq GHSA-h9h3-jx58-6hqq — Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting 2026-10-09T02:14:54.871830+00:00

Affected: Maven: javagh.jenkins:mashup-portlets-plugin

Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the "Generic JS Portlet" feature that lets a user populate a portlet using a custom JavaScript expression.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.

 https://cve.radiocsirt.org/vuln/gsd-2023-28679 gsd-2023-28679 2026-10-09T02:14:54.871856+00:00 gsd-2023-28679 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0704 WID-SEC-W-2023-0704 — Jenkins Plugins: Mehrere Schwachstellen 2026-10-09T02:14:54.871869+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.