Jenkins Project Jenkins Simple Queue Plugin

• CVE-2025-31723 Medium 4.3 A cross-site request forgery (CSRF) vulnerability in Jenkins Simple Queue Plugin 1.4.6 and earlier allows attackers to change and reset the build queue order. 0.3%
• CVE-2024-54003 High 8.0 Jenkins Simple Queue Plugin 1.4.4 and earlier does not escape the view name, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by attackers with View/Create permission. 81.2%