Stored XSS vulnerability in Code Coverage API Plugin
Code Coverage API Plugin 1.1.2 and earlier does not escape the filename of the coverage report used in its view.This results in a stored cross-site scripting vulnerability that can be exploited by users able to change the job configuration.Code Coverage API Plugin 1.1.3 escapes the filename of the coverage report used in its view.