description: A reflected cross-site scripting vulnerability in Jenkins build-metrics Plugin allows attackers to inject arbitrary HTML and JavaScript into web pages provided by this plugin.
affected:
{
product: Jenkins build-metrics Plugin
vendor: Jenkins project
versions:
status: affected, version: 1.3 and earlier
}