cve,link,title,description,vendor,products,score,severity,epss,cisa,cisa_published,article,ransomware,exploited,exploited_date,poc,trended,trended_no_1,trended_no_1_date,published,trended_score CVE-2020-2175,https://securityvulnerability.io/vulnerability/CVE-2020-2175,,"Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site scripting (XSS) vulnerability exploitable by users able to control the XML input files processed by the plugin.",Jenkins,Jenkins Fitnesse Plugin,5.4,MEDIUM,0.0005000000237487257,false,,false,false,false,,,false,false,,2020-04-07T12:25:25.000Z,0 CVE-2020-2120,https://securityvulnerability.io/vulnerability/CVE-2020-2120,,Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.,Jenkins,Jenkins Fitnesse Plugin,8.8,HIGH,0.0009299999801442027,false,,false,false,false,,,false,false,,2020-02-12T14:35:44.000Z,0