Launchpad.net

CVE 2012-4441

Cross-site Scripting (XSS) in Jenkins main before 1.482 and LTS before 1.466.2 allows remote attackers to inject arbitrary web script or HTML in the CI game plugin.

See the CVE page on Mitre.org for more details.