description: Jenkins update-center2 3.13 and 3.14 renders the required Jenkins core version on plugin download index pages without sanitization, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers able to provide a plugin for hosting.
affected:
{
defaultStatus: unaffected
product: Jenkins update-center2
vendor: Jenkins Project
versions:
status: affected, version: 3.13
status: affected, version: 3.14
}