Agile Product Supplier Collaboration For Process
1 CVEs
product
Monthly
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.
XSS
Jquery
Drupal
Debian Linux
Fedora
+66
NVD
GitHub
Exploit-DB
VulDB
CVSS 3.1
6.9
EPSS
2.1%
CVE-2020-11022
LIB
EPSS 2%
CVSS 6.9
MEDIUM
POC
PATCH
This Month
In jQuery starting with 1.12.0 and before 3.5.0, passing HTML from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. Rated medium severity (CVSS 6.9), this vulnerability is remotely exploitable, no authentication required. Public exploit code available.
XSS
Jquery
Drupal
+68
NVD
GitHub
Exploit-DB
VulDB