CVEs-PoC/2021/CVE-2021-21660.md

CVE-2021-21660

Description

Jenkins Markdown Formatter Plugin 0.1.0 and earlier does not sanitize crafted link target URLs, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with the ability to edit any description rendered using the configured markup formatter.

POC

Reference

• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-21660
• https://www.whitesourcesoftware.com/vulnerability-database/CVE-2021-21660

Github

No PoCs found on GitHub currently.