CVE-2026-84665
CVSS Score
8.0
EPSS Score
0.0%
EPSS Percentile
0th
Jenkins SonarQube Scanner Plugin 2.18.3 and earlier does not limit URL schemes for the dashboard links it creates based on SonarQube scanner results, allowing the `javascript:` scheme, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with Item/Configure permission.
| Vendor | jenkins project |
| Product | jenkins sonarqube scanner plugin |
| Published | Sep 2, 2026 |
| Last Updated | Sep 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for jenkins project jenkins sonarqube scanner plugin
Be the first to know when new high vulnerabilities affecting jenkins project jenkins sonarqube scanner plugin are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Jenkins Project / Jenkins SonarQube Scanner Plugin
0 ≤ 2.18.3