Description

jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.

Remediation

References

http://seclists.org/fulldisclosure/2014/Sep/10

https://bugzilla.redhat.com/show_bug.cgi?id=1136683

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0

Related Vulnerabilities

CVE-2022-38900 Vulnerability in maven package org.webjars.bowergithub.samverschueren:decode-uri-component

CVE-2020-8127 Vulnerability in maven package org.webjars.bower:reveal.js

CVE-2018-14041 Vulnerability in maven package org.webjars.bower:bootstrap

CVE-2019-10423 Vulnerability in maven package com.villagechief.codescan.jenkins:codescan

CVE-2023-25330 Vulnerability in maven package com.baomidou:mybatis-plus-extension

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Mailing List Third Party Advisory Issue Tracking