Skip to content
Heist/ feed
Unrated

JQuery Cross-Site Scripting (XSS) Vulnerability

Type: advisorySource: CISA Known Exploited VulnerabilitiesKnown exploited1 source record

JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser. CISA required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Announced Source revision 1
Original source ↗

CVE-2020-11023

Primary source · Revision 1

Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.

Security context

Source reference: kev:CVE-2020-11023

JQuery

Source reference: /product

Affected versions
Not stated in this record
Fixed versions
Not stated in this record
Prerequisites
Not stated in this record
Related CVEs
CVE-2020-11023

Source reference: /cveID

Publisher severity

No explicit severity was provided.

Event
#1003 · Revision 1
Added to Heist Feed
Publisher date
Read the original announcement