Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 10:09:03 +0000 EUVD-2026-218723 https://cve.radiocsirt.org/vuln/euvd-2026-218723 EUVD-2026-218723 https://cve.radiocsirt.org/vuln/euvd-2026-218723 fkie_cve-2023-28679 https://cve.radiocsirt.org/vuln/fkie_cve-2023-28679 <p>Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the &#34;Generic JS Portlet&#34; feature that lets a user populate a portlet using a custom JavaScript expression, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.</p> <p>Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the &#34;Generic JS Portlet&#34; feature that lets a user populate a portlet using a custom JavaScript expression, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-28679 GHSA-h9h3-jx58-6hqq — Jenkins Mashup Portlets Plugin vulnerable to stored cross-site scripting https://cve.radiocsirt.org/vuln/ghsa-h9h3-jx58-6hqq <p><strong>Affected:</strong> Maven: javagh.jenkins:mashup-portlets-plugin</p> <p>Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the &#34;Generic JS Portlet&#34; feature that lets a user populate a portlet using a custom JavaScript expression.</p> <p>This results in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.</p> <p><strong>Affected:</strong> Maven: javagh.jenkins:mashup-portlets-plugin</p> <p>Jenkins Mashup Portlets Plugin 1.1.2 and earlier provides the &#34;Generic JS Portlet&#34; feature that lets a user populate a portlet using a custom JavaScript expression.</p> <p>This results in a stored cross-site scripting (XSS) vulnerability exploitable by authenticated attackers with Overall/Read permission.</p> https://cve.radiocsirt.org/vuln/ghsa-h9h3-jx58-6hqq gsd-2023-28679 https://cve.radiocsirt.org/vuln/gsd-2023-28679 gsd-2023-28679 https://cve.radiocsirt.org/vuln/gsd-2023-28679 WID-SEC-W-2023-0704 — Jenkins Plugins: Mehrere Schwachstellen https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0704 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Jenkins ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, Daten zu manipulieren und einen Cross-Site-Scripting-Angriff durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-0704