Description

jQuery 1.4.2 allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to use of the text method inside after.

Remediation

References

http://seclists.org/fulldisclosure/2014/Sep/10

https://bugzilla.redhat.com/show_bug.cgi?id=1136683

https://help.ecostruxureit.com/display/public/UADCE725/Security+fixes+in+StruxureWare+Data+Center+Expert+v7.6.0

Related Vulnerabilities

CVE-2019-9844 Vulnerability in npm package simple-markdown

CVE-2019-19771 Vulnerability in npm package siganle

CVE-2022-31198 Vulnerability in npm package @openzeppelin/contracts-upgradeable

CVE-2020-35728 Vulnerability in maven package com.fasterxml.jackson.core:jackson-databind

CVE-2020-15152 Vulnerability in npm package ftp-srv

Severity

High

Classification

CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Mailing List Third Party Advisory Issue Tracking