Jenkins Project Jenkins Sonargraph Integration Plugin

• CVE-2023-35145 Medium 5.4 Jenkins Sonargraph Integration Plugin 5.0.1 and earlier does not escape the file path and the project name for the Log file field form validation, resulting in a stored cross-site scripting vulnerabil 0.7%
• CVE-2020-2201 Unrated Jenkins Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation, resulting in a stored cross-site scripting vulnerability. 0.7%