description: A form validation endpoint in Jenkins Queue cleanup Plugin 1.3 and earlier does not properly escape a query parameter displayed in an error message, resulting in a reflected XSS vulnerability.
affected:
{
product: Jenkins Queue cleanup Plugin
vendor: Jenkins project
versions:
lessThanOrEqual: 1.3, status: affected, version: unspecified, versionType: custom
}