Jenkins Nested View Plugin 1.20 through 1.25 (both inclusive) does not escape search parameters, resulting in a reflected cross-site scripting (XSS) vulnerability.
{
"extracted_events": [
{
"cpe": "cpe:2.3:a:jenkins:nested_view:*:*:*:*:*:jenkins:*:*",
"range": [
{
"introduced": "1.20"
},
{
"last_affected": "1.25"
}
],
"source": "CPE_RANGE"
}
]
}