Filtered by vendor Jenkins Subscriptions
Filtered by product Echarts Api Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-2194 1 Jenkins 1 Echarts Api 2024-11-21 5.4 Medium
Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the display name of the builds in the trend chart, resulting in a stored cross-site scripting vulnerability.
CVE-2020-2193 1 Jenkins 1 Echarts Api 2024-11-21 5.4 Medium
Jenkins ECharts API Plugin 4.7.0-3 and earlier does not escape the parser identifier when rendering charts, resulting in a stored cross-site scripting vulnerability.