description: Jenkins JUnit Plugin 1166.va_436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin.
affected:
{
product: Jenkins JUnit Plugin
vendor: Jenkins Project
versions:
lessThanOrEqual: 1166.va_436e268e972, status: affected, version: unspecified, versionType: custom
status: unaffected, version: 1119.1124.va_a_8ccde5658f
}