CVE-2022-27202
MEDIUMJenkins Extended Choice Parameter < 346.vd87693c5a_86c - XSS
Title source: ruleDescription
Jenkins Extended Choice Parameter Plugin 346.vd87693c5a_86c and earlier does not escape the value and description of extended choice parameters of radio buttons or check boxes type, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
Scores
CVSS v3
5.4
EPSS
0.0490
EPSS Percentile
89.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Classification
CWE
CWE-79
Status
published
Affected Products (2)
jenkins/extended_choice_parameter
< 346.vd87693c5a_86c
org.jenkins-ci.plugins/extended-choice-parameter
Maven
Timeline
Published
Mar 15, 2022
Tracked Since
Feb 18, 2026