Description

jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.

Remediation

References

http://seclists.org/fulldisclosure/2014/Sep/10

https://bugzilla.redhat.com/show_bug.cgi?id=1136683

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0

Related Vulnerabilities

CVE-2020-7743 Vulnerability in npm package mathjs

CVE-2023-38647 Vulnerability in maven package org.apache.helix:helix-rest

CVE-2020-6468 Vulnerability in npm package electron

CVE-2018-1000420 Vulnerability in maven package org.jenkins-ci.plugins:mesos

CVE-2021-21414 Vulnerability in npm package @prisma/sdk

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Mailing List Third Party Advisory Issue Tracking