A vulnerability, which was classified as problematic, was found in Jenkins HTML Publisher Plugin up to 427. Affected by this issue is some unknown functionality. Such manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-42524. The attack can be launched remotely. No exploit exists.