Jenkins Project Jenkins Summary Display Plugin

• CVE-2026-70441 Medium 5.4 Jenkins Summary Display Plugin 1.15 and earlier does not escape the job name in a JavaScript context in build report pages, resulting in a stored cross-site scripting (XSS) vulnerability exploitable b 0.2%