description: A stored cross site scripting vulnerability in Jenkins Maven Release Plugin 0.14.0 and earlier allowed attackers to inject arbitrary HTML and JavaScript in the plugin-provided web pages in Jenkins.
affected:
{
product: Jenkins Maven Release Plugin
vendor: Jenkins project
versions:
status: affected, version: 0.14.0 and earlier
}