description: Jenkins iceScrum Plugin 1.1.6 and earlier does not sanitize iceScrum project URLs on build views, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to configure jobs.
affected:
{
vendor: Jenkins Project
product: Jenkins iceScrum Plugin
versions:
version: 0, versionType: maven, lessThanOrEqual: 1.1.6, status: affected
defaultStatus: unknown
}