Total vulnerabilities in the database
Jenkins Matrix Project Plugin 1.16 and earlier does not escape the axis names shown in tooltips on the overview page of builds with multiple axes, resulting in a stored cross-site scripting vulnerability.
CVSS v3:
CVSS v2:
CWEs:
OWASP TOP 10: