description: A reflected cross site scripting vulnerability in Jenkins Embeddable Build Status Plugin 2.0.1 and earlier allowed attackers inject arbitrary HTML and JavaScript into the response of this plugin.
affected:
{
product: Jenkins Embeddable Build Status Plugin
vendor: Jenkins project
versions:
status: affected, version: 2.0.1 and earlier
}