CVE-2020-7656: vulnerability in jquery
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 6.4%
from disclosure to weapon1785 days
Published on NVDMay 19
1st PoC+1785d
jquery prior to 1.9.0 allows Cross-site Scripting attacks via the load method. The load method fails to recognize and remove "<script>" HTML tags that contain a whitespace character, i.e: "</script >", which results in the enclosed script logic to be executed.
Affected products
n/a · jquerypublic PoCs found — 1
exploitdbwww.exploit-db.com/exploits/52141unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
https://security.netapp.com/advisory/ntap-20200528-0001/https://snyk.io/vuln/SNYK-JS-JQUERY-569619https://supportportal.juniper.net/s/article/2021-07-Security-Bulletin-Junos-OS-Multiple-J-Web-vulnerabilities-resolved-in-Junos-OS-21-2R1?language=en_UShttps://www.oracle.com/security-alerts/cpujul2022.html