Vuln ID: CVE-2020-2264
Published: 2020-09-16 14:15:13Z
Description: Jenkins Custom Job Icon Plugin 0.2 and earlier does not escape the job descriptions in tooltips, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Job/Configure permission.
Source: NVD.NIST.GOV