Description

jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.

Remediation

References

https://bugzilla.redhat.com/show_bug.cgi?id=1136683

http://seclists.org/fulldisclosure/2014/Sep/10

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0

Related Vulnerabilities

CVE-2020-11022 Vulnerability in maven package org.webjars.bower:jquery

CVE-2020-26238 Vulnerability in maven package com.cronutils:cron-utils

CVE-2018-1000873 Vulnerability in maven package com.fasterxml.jackson.datatype:jackson-datatype-jsr310

CVE-2021-25916 Vulnerability in npm package patchmerge

CVE-2015-5169 Vulnerability in maven package org.apache.struts:struts2-core

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Issue Tracking Third Party Advisory Mailing List