https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T19:39:36.144243+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cnvd-2020-23849 cnvd-2020-23849 2026-09-29T19:39:36.147834+00:00 cnvd-2020-23849 https://vulnerability.circl.lu/vuln/fkie_cve-2020-2175 fkie_cve-2020-2175 2026-09-29T19:39:36.147901+00:00

Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control the XML input files processed by the plugin.

 https://vulnerability.circl.lu/vuln/ghsa-f6vx-3fq6-hxm8 GHSA-f6vx-3fq6-hxm8 — Stored XSS vulnerability in Jenkins FitNesse Plugin 2026-09-29T19:39:36.147959+00:00

Affected: Maven: org.jenkins-ci.plugins:fitnesse

Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI.

This results in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control the XML input files processed by the plugin.

Jenkins FitNesse Plugin 1.32 escapes content from XML input files before rendering it on the Jenkins UI.

 https://vulnerability.circl.lu/vuln/gsd-2020-2175 gsd-2020-2175 2026-09-29T19:39:36.148008+00:00 gsd-2020-2175