description: Jenkins Yet Another Build Visualizer Plugin 1.11 and earlier does not escape tooltip content, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users with Run/Update permission.
affected:
{
product: Jenkins Yet Another Build Visualizer Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 1.11, status: affected, version: unspecified, versionType: custom
}