Description

jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.

Remediation

References

https://bugzilla.redhat.com/show_bug.cgi?id=1136683

http://seclists.org/fulldisclosure/2014/Sep/10

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0

Related Vulnerabilities

CVE-2020-27543 Vulnerability in npm package restify-paginate

CVE-2022-0764 Vulnerability in npm package strapi

CVE-2020-8203 Vulnerability in maven package org.webjars:lodash

CVE-2019-19771 Vulnerability in npm package bpi66

CVE-2020-7769 Vulnerability in maven package org.webjars.npm:nodemailer

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Issue Tracking Third Party Advisory Mailing List