Executive brief
Jenkins HTML Publisher Plugin has a XSS vulnerability in the legacy wrapper file
Affected products
- Maven org.jenkins-ci.plugins:htmlpublisher
Junglewise Threat Intelligence
CVE-2026-42524: Jenkins HTML Publisher Plugin has a XSS vulnerability in the legacy wrapper file
CVE-2026-42524 · Severity: low · CVSS 3.1 · Published 2026-04-29
Technologies: org.jenkins-ci.plugins:htmlpublisher (Maven). Vendors: Maven.
Related threats
- Jenkins HTML Publisher Plugin vulnerability displays controller file system information in its logs
- Jenkins HTML Publisher Plugin Stored XSS vulnerability
- Jenkins HTML Publisher Plugin Path traversal vulnerability
- Jenkins HTML Publisher Plugin does not properly sanitize input
- Jenkins HTML Publisher Plugin vulnerable to Cross-site Scripting