Scriptler Jenkins version 2.9 suffers from a cross site scripting vulnerability.