Every CVE whose affected-product data names Jenkins Badge, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (2)
CVE-2018-1000604 — CVSS 5.4 (medium): A persisted cross-site scripting vulnerability exists in Jenkins Badge Plugin 1.4 and earlier in BadgeSummaryAction.java…
CVE-2022-23108 — CVSS 5.4 (medium): Jenkins Badge Plugin 1.9 and earlier does not escape the description and does not check for allowed protocols when creating a badge…