Description

Cross-site scripting (XSS) vulnerability in jQuery before 1.6.3, when using location.hash to select elements, allows remote attackers to inject arbitrary web script or HTML via a crafted tag.

Remediation

References

CVE-2011-4969

Related Vulnerabilities

WordPress Plugin Funky Penguin WP-PHPList 'unsubscribeemail' Parameter Cross-Site Scripting (2.10.2)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-0212)

WordPress Plugin Yes/No Chart SQL Injection (1.0.11)

Ruby on Rails Deserialization of Untrusted Data Vulnerability (CVE-2018-16476)

WordPress Plugin My Page Order Cross-Site Scripting (4.3)

Severity

Medium

Classification

CVE-2011-4969 CWE-707

Tags

Missing Update Known Vulnerabilities